Lucene search
+L

1 matches found

RubySec
RubySec
added 2021/11/18 12:0 a.m.32 views

Authentication Bypass by CSRF Weakness

Impact CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevise are affected if protectfromforgery method is both: - Executed whether as: - A beforeaction callback the default - A prependbeforeaction option prepend: tr...

9.3CVSS6.7AI score0.00609EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder