REDHAT-BUG-544329: CSRF
A possibility to circumvent protection against cross-site request forgery (CSRF) attacks was found in Ruby on Rails. Quoting upstream security advisory for exact details:
There is a bug in all 2.1.x versions of Ruby on Rails which affects the effectiveness of the CSRF protection given by protectfromforgery.
By design rails does not perform token verification on requests with certain content types not typically generated by browsers. Unfortunately this list also included ‘text/plain’ which can be generated by browsers.
Requests can be crafted which will circumvent the CSRF protection entirely. Rails does not parse the parameters provided with these requests, but that may not be enough to protect your application.
References: ----------- http://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html http://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1
Upstream patch: --------------- http://github.com/rails/rails/commit/099a98e9b7108dae3e0f78b207e0a7dc5913bd1a
CVE Request: ------------ http://www.openwall.com/lists/oss-security/2009/11/28/1
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-544329?
REDHAT-BUG-544329 is classified as a medium severity vulnerability due to its potential to weaken CSRF protection.
How do I fix REDHAT-BUG-544329?
To fix REDHAT-BUG-544329, upgrade Ruby on Rails to a version greater than 2.1.x that addresses this CSRF protection issue.
Which versions of Ruby on Rails are affected by REDHAT-BUG-544329?
All versions of Ruby on Rails from 2.1.0 to 2.1.x are affected by REDHAT-BUG-544329.
What kind of attack is REDHAT-BUG-544329 associated with?
REDHAT-BUG-544329 is associated with cross-site request forgery (CSRF) attacks.
What should I do if I cannot upgrade due to REDHAT-BUG-544329?
If upgrading is not an option due to REDHAT-BUG-544329, consider implementing additional security measures to mitigate CSRF risks.