Security Advisory

CVE-2020-8166

4.3
MEDIUM

Vulnerability Description

A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a global CSRF token such as the one present in the authenticity_token meta tag, forge a per-form CSRF token.
Published Date July 2, 2020
Official Source NIST NVD Advisory