PT-2018-4702

Name of the Vulnerable Software and Affected Versions rails admin ruby gem versions prior to 1.1.1 Description The issue allows for cross-site request forgery CSRF attacks. Non-GET methods were not validating CSRF tokens, which could allow an attacker to gain access to the application's...