tocsin

Debian/ruby-rodauth: unknown

Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types

Action: Upgrade ruby-rodauth to 2.47.0-1 or later.

Affected

introducedfixedlast affected
02.47.0-1-

Fixed versions

2.47.0-1

Sources

published · modified · JSON