CVE-2023-50727
Resque vulnerable to reflected XSS in Queue Endpoint
Résumé
Resque vulnerable to reflected XSS in Queue Endpoint
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. Reflected XSS issue occurs when /queues is appended with /">. This issue has been patched in version 2.6.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com