RubyGems/camaleon_cms: medium 5.4

Camaleon CMS vulnerable to stored XSS through user file upload (GHSL-2024-184)

Action: Upgrade camaleon_cms to 2.8.1 or later.

bundle update camaleon_cms

Affected

Fixed versions

Sources

• osv: GHSA-8fx8-3rg2-79xw
• https://github.com/owen2345/camaleon-cms/security/advisories/GHSA-r9cr-qmfw-pmrc
• https://github.com/owen2345/camaleon-cms
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/GHSA-r9cr-qmfw-pmrc.yml

published 2024-09-23T22:10:33Z · modified 2024-12-03T06:09:09.835007Z · JSON