Lucene search
+L

1 matches found

CNVD
CNVD
added 2018/07/17 12:0 a.m.11 views

rails_admin ruby cross-site request forgery vulnerability

railsadmin ruby is a Rails engine that supports the use of interfaces to manage data. A cross-site request forgery vulnerability exists in versions of railsadmin ruby prior to 1.1.1, which stems from a failure of the Non-GET method to validate a cross-site request forgery token. An attacker could...

8.8CVSS8.7AI score0.00983EPSS
SaveExploits1References1
Rows per page
Query Builder