PT-2011-2350

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 2.1.x through 2.3.x before 2.3.11 Ruby on Rails versions 3.x before 3.0.4 Description The issue makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged AJAX or API requests. Thi...