Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2016-3098

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cc8c-26rj-v2vx

administrate vulnerable to Cross-Site Request Forgery Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code.

gitlab/gem/administrate/CVE-2016-3098

Cross-site request forgery `Administrate::ApplicationController` actions don't have CSRF protection. Remote attackers can hijack user's sessions and use any functionality that administrate exposes on their behalf.