GHSA-pxqr-8v54-m2hjHighCVSS 8.8

Cross-site request forgery in rails_admin

Published
August 8, 2018
Last Modified
November 8, 2023

🔗 CVE IDs covered (1)

CVE-2016-10522 →

📋 Description

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.

🎯 Affected products1

  • rubygems/rails_admin:>= 1.0.0, < 1.1.1

🔗 References (5)