CVE-2020-8166

score

<0.1

cvss

4.3

epss

1.7%

published

2020-07-02

kev added

—

first seen

2026-10-21

Rails < 5.2.5, < 6.0.4 contain a cross-site request forgery caused by forgery of per-form CSRF tokens using a global CSRF token, letting attackers perform unauthorized actions, exploit requires attacker to craft malicious requests with valid global CSRF token.