RubyGems/pghero CVE-2020-16253: high 8.1, EPSS 0.46%

PgHero gem allows CSRF

Action: Upgrade pghero to 2.7.0 or later.

bundle update pghero

Affected

Fixed versions

Sources

• osv: GHSA-v6fx-752r-ccp2
• https://nvd.nist.gov/vuln/detail/CVE-2020-16253
• https://github.com/ankane/pghero/issues/330
• https://github.com/ankane/pghero/commit/14b67b32fed19a30aaf9826ee72f2a29cda604e9
• https://github.com/ankane/pghero
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pghero/CVE-2020-16253.yml

CVE-2020-16253 · published 2020-08-05T14:53:43Z · modified 2024-02-16T08:23:18.681389Z · JSON