Description
The PgHero gem through 2.6.0 for Ruby allows CSRF.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | pghero | < 2.7.0 | 2.7.0 | GHSA-v6fx-752r-ccp2 |
High · 8.1
CVE-2020-16253
EUVD-2020-0642GHSA-v6fx-752r-ccp2
PgHero gem allows CSRF
Published Aug 5, 2020 · Updated Aug 4, 2024 · Assigned by mitre