CVE-2008-7248

Ruby on Rails <2.1.3 & <2.2.2 - CSRF

Title source: llm

Description

Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.

Exploits (1)

exploitdb WORKING POC VERIFIED

by p0deje · textremotelinux

https://www.exploit-db.com/exploits/33402

View Code ZIP pw:eip

References (10)

[Mailing List] http://groups.google.com/group/rubyonrails-security/browse_thread/thread/d741ee286e36e301?hl=en

[Mailing List] http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

[Various Sources] http://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/

[Vendor Advisory] http://secunia.com/advisories/36600

[Third Party Advisory] http://secunia.com/advisories/38915

[Various Sources] http://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1

[Exploit] http://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html

[Vendor Advisory] http://www.vupen.com/english/advisories/2009/2544

[Mailing List] http://www.openwall.com/lists/oss-security/2009/11/28/1

[Mailing List] http://www.openwall.com/lists/oss-security/2009/12/02/2

Scores

EPSS 0.1141

EPSS Percentile 93.6%

Details

CWE

CWE-20

Status published

Products (6)

rubygems/actionpack 2.1.0 - 2.1.3RubyGems

rubyonrails/rails 2.1.0

rubyonrails/rails 2.1.1

rubyonrails/rails 2.1.2

rubyonrails/rails 2.2.0

rubyonrails/rails 2.2.1

Published Dec 16, 2009

Tracked Since Feb 18, 2026