Skip to content
OpenAdvisories
Medium · 5.4 CVE-2016-3098 EUVD-2022-6534GHSA-cc8c-26rj-v2vx

administrate vulnerable to Cross-Site Request Forgery

Published Aug 5, 2022 · Updated Aug 5, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code.

Affected products

VendorProductAffectedFixed
— administrate 0.1.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems administrate < 0.1.5 0.1.5 GHSA-cc8c-26rj-v2vx

References