Security Advisory

CVE-2020-8167

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-19 17:16:06
Last updated 2024-08-04 09:48:25
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.