PT-2021-24467 · Rubygems · Devise Invitable

Published 2021-02-24 · Updated 2021-02-24

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Package (affected versions not specified)

Description: The issue allows for Cross-Site Request Forgery (CSRF) attacks.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

GHSA-WJ5J-XPCJ-45GC

Affected Products

Devise Invitable

References · 4

• https://osv.dev/vulnerability/GHSA-wj5j-xpcj-45gc · Vendor Advisory
• https://github.com/scambra/devise_invitable/issues/457 · Note
• https://github.com/scambra/devise_invitable/commit/d1bb19efca8e35885e1c2f0931d6171fce8cf74e · Note
• https://sourceclear.com/vulnerability-database/security/cross-site-request-forgery-csrf/ruby/sid-2272 · Note