Package · RubyGems

rails_admin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2016-10522

Cross-site request forgery in rails_admin

rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the …

https://github.com/sferik rails_admin ruby gem rails_admin ruby-rails-admin Ubuntu RubyGems

Jul 5, 2018