Cross-Site Request Forgery (CSRF)

Moderate severity GitHub Reviewed Published Feb 24, 2021 to the GitHub Advisory Database • Updated Jan 9, 2023

Withdrawn This advisory was withdrawn on Feb 24, 2021

Package

devise_invitable (RubyGems)

Affected versions

< 1.3.5

Patched versions

1.3.5

Description

Withdrawn

Affected versions of the package are vulnerable to Cross-Site Request Forgery (CSRF) attacks.

References

Reviewed Jun 26, 2019

Published to the GitHub Advisory Database Feb 24, 2021

Withdrawn Feb 24, 2021

Last updated Jan 9, 2023