Security Advisory

CVE-2020-8166

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-07-02 18:35:17

Last updated 2026-04-28 15:45:49

Assigner hackerone

CVSS score not scored

State PUBLISHED

Description

A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a global CSRF token such as the one present in the authenticity_token meta tag, forge a per-form CSRF token.

← Browse all CVEs View on cve.org ↗