CVE-2020-8167

rubygem-actionview: CSRF vulnerability in rails-ujs

Published Jun 19, 2020 CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Description
A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-4766-1 rails security update
EUVD EUVD EUVD-2020-0579 A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.
Github GHSA Github GHSA GHSA-xq5j-gw7f-jgj8 CSRF Vulnerability in rails-ujs
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
hackerone
Published
Updated
Aug 4, 2024, 9:48 AM
Reserved
Jan 28, 2020, 12:00 AM
Status
Modified
Published
Jun 19, 2020, 6:15 PM
Modified
Jun 17, 2026, 3:25 AM
Severity
Moderate
Public date
May 18, 2020, 12:00 AM