PT-2020-19996 · Ruby On Rails+3 · Rails+3
CVE-2020-8167
·
Published
2020-06-19
·
Updated
2025-09-29
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
rails versions prior to 6.0.3.1
rails versions prior to 5.2.4.3
Description
A CSRF vulnerability exists in the rails-ujs module that could allow attackers to send CSRF tokens to wrong domains. This issue is a regression of a previous vulnerability. In certain scenarios, an attacker might be able to control the href attribute of an anchor tag or the action attribute of a form tag, triggering a POST action and sending the CSRF token to a cross-origin URL.
Recommendations
For versions prior to 5.2.4.3 and 6.0.3.1, update to a fixed version, such as rails >= 5.2.4.3 or rails >= 6.0.3.1, to resolve the issue.
As a temporary workaround, consider changing code that allows users to control the href attribute of an anchor tag or the action attribute of a form tag to filter the user parameters, for example, by using
filtered params instead of params.Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Red Os
Suse
Rails