CVE-2016-10522

CVE-2016-10522 describes a Cross-Site Request Forgery (CSRF) vulnerability in the rails_admin Ruby gem versions prior to 1.1.1. This flaw allowed attackers to bypass CSRF token validation for non-GET HTTP methods, potentially enabling unauthorized access and manipulation of administrative endpoints exposed by the gem. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over a network with low attack complexity, leading to high impacts on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.