ROS-20250625-04

A vulnerability in the Ruby on Rails software platform is related to a CSRF vulnerability in the rails-ujs module. Exploitation of the vulnerability could allow an attacker acting remotely to send CSRF tokens to the wrong domains. invalid domains...

SUSE CVE-2020-8167

A CSRF vulnerability exists in rails = 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains...

PT-2020-19996 · Ruby On Rails +3 · Rails +3

Name of the Vulnerable Software and Affected Versions: rails versions prior to 6.0.3.1 rails versions prior to 5.2.4.3 Description: A CSRF vulnerability exists in the rails-ujs module that could allow attackers to send CSRF tokens to wrong domains. This issue is a regression of a previous...