Lucene search

K
osvGoogleOSV:CVE-2020-8167
HistoryJun 19, 2020 - 6:15 p.m.

CVE-2020-8167

2020-06-1918:15:11
Google
osv.dev
7

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.2%

A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.