CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.
CVE
CVE-2020-8166
Severity
MEDIUM
CVSS
4.3
EPSS
1.67%
Original NVD Description
A CSRF forgery vulnerability exists in rails < 5.2.5, rails < 6.0.4 that makes it possible for an attacker to, given a global CSRF token such as the one present in the authenticity_token meta tag, forge a per-form CSRF token.
Related CVEs
Other vulnerabilities affecting the same vendor(s)