RubyGems/pageflow: high
Pageflow vulnerable to insecure direct object reference in membership update endpoint
Action: Upgrade pageflow to 14.5.2 or later.
bundle update pageflowAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.5.2 | - |
| 15.0.0 | 15.7.1 | - |
Fixed versions
| 14.5.2 | 15.7.1 |
Sources
- osv: GHSA-qcqv-38jg-2r43
- https://github.com/codevise/pageflow/security/advisories/GHSA-qcqv-38jg-2r43
- https://github.com/codevise/pageflow/pull/1862
- https://github.com/codevise/pageflow
published · modified · JSON