CVE-2016-10522 | BDVDB-2026-103404 Detail

Description#

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-07-05Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.