description: A CSRF vulnerability exists in rails <= 6.0.3 rails-ujs module that could allow attackers to send CSRF tokens to wrong domains.
problem types: Cross-Site Request Forgery (CSRF) (CWE-352)
affected:
{
product: http://github.com/rails/rails
vendor: n/a
versions:
status: affected, version: Fixed in 5.2.4.3, 6.0.3.1
}