Vulnerabilities

CVE-2020-8167 | BDVDB-2026-137753 Detail

http://github.com/rails/rails

Description#

A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-352 Cross-Site Request Forgery (CSRF)

References#

Exploit#

No public exploit known

History#

Version 12020-06-19Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.