Lucene search
Veracode Vulnerability DatabaseVERACODE:25454HistoryMay 20, 2020 - 12:09 a.m.
Cross-Site Request Forgery (CSRF)
2020-05-2000:09:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
EPSS
0.003
Percentile
70.2%
@rails/ujs is vulnerable to cross-site request forgery (CSRF). The same-origin header in XMLHttpRequest requests are not validated before including the CSRF token, potentially allowing remote attackers to submit requests on behalf of the user.
Related
osv
osv
CVE-2020-8167
2020-06-19 18:15:11
CSRF Vulnerability in rails-ujs
2020-07-07 16:34:10
rails - security update
2020-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2020-8167
2020-06-19 00:00:00
prion
prion
Cross site request forgery (csrf)
2020-06-19 18:15:00
debiancve
debiancve
CVE-2020-8167
2020-06-19 18:15:11
cve
cve
CVE-2020-8167
2020-06-19 18:15:11
cvelist
cvelist
CVE-2020-8167
2020-06-19 17:16:06
nvd
nvd
CVE-2020-8167
2020-06-19 18:15:11
gitlab
gitlab
Cross-Site Request Forgery (CSRF)
2020-06-19 00:00:00
rubygems
rubygems
CSRF Vulnerability in rails-ujs
2020-05-17 21:00:00
hackerone
hackerone
redhatcve
redhatcve
CVE-2020-8167
2020-06-02 17:53:07
github
github
CSRF Vulnerability in rails-ujs
2020-07-07 16:34:10
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : rubygem-actionview-5_1 (SUSE-SU-2023:2059-1)
2023-04-28 00:00:00
FreeBSD : Rails -- multiple vulnerabilities (85fca718-99f6-11ea-bf1d-08002728f74c)
2020-05-20 00:00:00
Debian DSA-4766-1 : rails - security update
2020-09-25 00:00:00
openvas
openvas
Ruby on Raily < 5.2.4.3, 6.x < 6.0.3.1 Multiple Vulnerabilities - Linux
2020-06-29 00:00:00
Ruby on Raily < 5.2.4.3, 6.x < 6.0.3.1 Multiple Vulnerabilities - Windows
2020-06-29 00:00:00
Debian: Security Advisory (DSA-4766-1)
2020-09-26 00:00:00
freebsd
freebsd
Rails -- multiple vulnerabilities
2020-05-18 00:00:00
debian
debian
[SECURITY] [DSA 4766-1] rails security update
2020-09-24 20:50:38
suse
suse
Security update for rmt-server (important)
2020-11-23 00:00:00
Security update for rmt-server (important)
2020-11-21 00:00:00
redhat
redhat
(RHSA-2021:1313) Moderate: Satellite 6.9 Release
2021-04-21 12:43:38