logo

Database

Cross-site request forgery In devise_invitable

Description

Cross-Site Request Forgery (CSRF)

Withdrawn

Affected versions of the package are vulnerable to Cross-Site Request Forgery (CSRF) attacks.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. GCVE-GHSA-wj5j-xpcj-45gc

References

1. https://github.com/scambra/devise_invitable/issues/4572. https://github.com/scambra/devise_invitable/commit/d1bb19efca8e35885e1c2f0931d6171fce8cf74e3. https://www.sourceclear.com/vulnerability-database/security/cross-site-request-forgery-csrf/ruby/sid-2272

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.