H1-732415 — Vulnetix

H1-732415 PUBLISHED CVSS 5.900000095367432 MEDIUM

The authenticity_token can be reversed and used to forge valid per_form_csrf_tokens for arbitrary routes

Risk Scores

CVSS v3.1

5.900000095367432

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N

Timeline

Aug 27, 2020 CVE Published
Aug 27, 2020 PoC Published

References

The authenticity_token can be reversed and used to forge valid per_form_csrf_tokens for arbitrary routes advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›