RubyGems/camaleon_cms: medium 5.4

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

Action: Upgrade camaleon_cms to 2.8.2 or later.

bundle update camaleon_cms

Affected

Fixed versions

Sources

• osv: GHSA-75j2-9gmc-m855
• https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
• https://github.com/owen2345/camaleon-cms
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/GHSA-8fx8-3rg2-79xw.yml

published 2024-09-25T21:53:27Z · modified 2024-12-05T05:39:56.339159Z · JSON