CVE-2020-8167

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-8167
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8167.json
Aliases
Related
Published
2020-06-19T18:15:11Z
Modified
2023-11-29T08:37:14.010127Z
Details

A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.

References

Affected packages

Git / github.com/rails/rails

Affected ranges

Type
GIT
Repo
https://github.com/rails/rails
Events

Affected versions

v6.*

v6.0.0
v6.0.1.rc1
v6.0.2
v6.0.2.1
v6.0.2.2
v6.0.2.rc1
v6.0.2.rc2
v6.0.3
v6.0.3.rc1