RubyGems/camaleon_cms CVE-2025-2304: critical 9.4, EPSS 0.63%
Camaleon CMS Vulnerable to Privilege Escalation through a Mass Assignment
Action: Upgrade camaleon_cms to 2.9.1 or later.
bundle update camaleon_cmsAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.1 | - |
Fixed versions
| 2.9.1 |
Sources
- osv: GHSA-rp28-mvq3-wf8j
- nvd: CVE-2025-2304
- https://github.com/owen2345/camaleon-cms/pull/1109
- https://github.com/owen2345/camaleon-cms/commit/179fd6b1ecf258d3e214aebfa87ac4a322ea4db4
- https://github.com/owen2345/camaleon-cms
- https://github.com/owen2345/camaleon-cms/releases/tag/2.9.1
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/camaleon_cms/CVE-2025-2304.yml
- https://www.tenable.com/security/research/tra-2025-09
CVE-2025-2304 · published · modified · JSON