CVE-2011-0447: rubyonrails rails Cross-Site Request Forgery (CSRF)

CVSS: 6.8v2.0MediumModified

AliasesDEBIAN-CVE-2011-0447GHSA-24fg-p96v-hxh8

Published 14-02-2011Last modified 06-08-2024

Vulnerability summary

CVE-2011-0447 is a medium (CVSS 6.8) Cross-Site Request Forgery (CSRF) vulnerability in rubyonrails rails. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.5% of scored vulnerabilities.

Overall risk

27/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

1.42%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

DSA-2247-1

Timeline

14-02-2011
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2) API requests that leverage "combinations of browser plugins and HTTP redirects," a related issue to CVE-2011-0696.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

1.42%

Chance of exploitation in the next 30 days

Percentile

73%

Versus all other CVEs

30-day change

0.00 pp

From 1.42% on 22-09-2026

22-09-202622-10-2026

EPSS score

1.42%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-352Cross-Site Request Forgery (CSRF)The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Affected systems

Debian1 product

rails< 2.3.11-0.1

RubyGems1 product

actionpack≥ 2.1.0, < 2.3.11 | ≥ 3.0.0, < 3.0.4

Rubyonrails1 product

rails2.1.0 | 2.1.1 | 2.1.2 | 2.2.0 | 2.2.1 | 2.2.2 | 2.3.2 | 2.3.3 | 2.3.4 | 2.3.9 | 2.3.10 | 3.0.0 | 3.0.0:beta | 3.0.0:beta2 | 3.0.0:beta3 | 3.0.0:beta4 | 3.0.0:rc | 3.0.0:rc2 | 3.0.1 | 3.0.1:pre | 3.0.2 | 3.0.2:pre | 3.0.3 | 3.0.4:rc1

3 vendors · 3 products