{"id":"CVE-2016-3098","details":"Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code.","aliases":["GHSA-cc8c-26rj-v2vx"],"modified":"2026-07-08T12:42:30.270638Z","published":"2022-08-05T16:15:09.653Z","references":[{"type":"FIX","url":"https://seclists.org/oss-sec/2016/q2/0"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/thoughtbot/administrate","events":[{"introduced":"0"},{"fixed":"463af26c1fb4e4cfd1ddb4f1c0bb5a2fcfba6471"}],"database_specific":{"cpe":"cpe:2.3:a:thoughtbot:administrate:*:*:*:*:*:ruby:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.1.5"}],"source":"CPE_RANGE"}}],"versions":["v0.1.4","v0.1.3","v0.1.2","v0.1.1","v0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3098.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"}]}