Not rated
CVE-2020-8167 A CSRF vulnerability exists in…
Description
A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| http://github.com/rails/rails | Versions not published |