CVE-2008-7248

Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass…

published December 16, 2009

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08080 · 94.8th percentile
Published
2009-12-16T01:00Z
EPSS history
Timeline
  • 16 DEC 01:00Z
    Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass…
    cvelistv5