CVSS v3.x: 6.2 (Medium)
- >= 4.0.0
This vulnerability impacts any Rails applications using
The issue has been patched in v4 of the
rails_multisite gem. Note that this upgrade will invalidate all previous signed/encrypted cookies. The impact of this invalidation will vary based on the application architecture.