2 matches found
GHSA-WWGQ-9JHF-QGW6 Cross-Site Request Forgery allowing sending of test emails and generation of node auto-deployment keys
Impact Due to improperly configured CSRF protections on two routes, a malicious user could execute a CSRF-based attack against the following endpoints: Sending a test email. Generating a node auto-deployment token. At no point would any data be exposed to the malicious user, this would simply...
[SECURITY] Fedora 8 Update: rubygem-actionmailer-2.1.1-1.fc8
Makes it trivial to test and deliver emails sent from a single service laye r...