RubyGems/oxidized-web CVE-2019-25088: medium 5.4, EPSS 0.56%
Oxidized Web vulnerable to Cross-site Scripting
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.13.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8qwh-rm6c-jv96
- https://nvd.nist.gov/vuln/detail/CVE-2019-25088
- https://github.com/ytti/oxidized-web/pull/195
- https://github.com/ytti/oxidized-web/commit/55ab9bdc68b03ebce9280b8746ef31d7fdedcc45
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/oxidized-web/CVE-2019-25088.yml
- https://github.com/ytti/oxidized-web
- https://vuldb.com/?ctiid.216870
- https://vuldb.com/?id.216870
CVE-2019-25088 · published · modified · JSON