CSRF timing attach in Sinatra rack-protection (CVE-2018-1000119)
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	dereckson
	Sep 20 2018, 21:40

Description

SaM-Solutions / ruby-rack-protection rack-protection

References:

Impact is low/unsure as Tommy doesn't contain form to post, so doesn't use CSRF.

rTOMMY Tommy
	D1778	rTOMMY9ca3ab76bdbc Update rack-protection

dereckson triaged this task as Low priority.Sep 20 2018, 21:40

dereckson created this task.

dereckson shifted this object from the Restricted Space space to the S1 Nasqueron space.Sep 21 2018, 09:56

dereckson changed the visibility from "Nasqueron security operations squad (Project)" to "Public (No Login Required)".

dereckson changed the edit policy from "Nasqueron security operations squad (Project)" to "All Users".