Description
Clockwork Web before 0.1.2, when Rails before 5.2 is used, allows CSRF.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | clockwork_web | < 0.1.2 | 0.1.2 | GHSA-p4xx-w6fr-c4w9 |
Medium · 6.5
CVE-2023-25015
EUVD-2023-0750GHSA-p4xx-w6fr-c4w9
Clockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.2
Published Feb 2, 2023 · Updated Mar 26, 2025 · Assigned by mitre