Nested attributes reject_if proc can be circumvented by providing "_destroy" parameter
High
Vulnerability Details
No vulnerability description provided or it is restricted.
Actions
View on HackerOneReport Stats
- Report ID: 90457
- State: Closed
- Substate: resolved
- Upvotes: 9