description: rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the gem.
problem types: Cross-Site Request Forgery (CSRF) (CWE-352)
affected:
{
product: rails_admin ruby gem
vendor: https://github.com/sferik
versions:
status: affected, version: >= 1.1.1
}