CVE-2023-50724
Resque vulnerable to reflected cross site scripting through pathname
Résumé
Resque vulnerable to reflected cross site scripting through pathname
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Resque (pronounced like "rescue") is a Redis-backed library for creating background jobs, placing those jobs on multiple queues, and processing them later. resque-web in resque versions before 2.1.0 are vulnerable to reflected XSS through the current_queue parameter in the path of the queues endpoint. This issue has been patched in version 2.1.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com