Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby on Rails Improper Input Validation Vulnerability - CVE-2008-7248 - Vulnerability Database
Ruby on Rails

Ruby on Rails Improper Input Validation Vulnerability - CVE-2008-7248

Medium
Reference: CVE-2008-7248
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-7248
Title: Ruby on Rails Improper Input Validation Vulnerability
Overview:

Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection as demonstrated using text/plain.