RubyGems/spina CVE-2024-7106: medium 4.3, EPSS 0.43%
Cross-Site Request Forgery in Spina
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.18.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wqw3-p83g-r24v
- https://nvd.nist.gov/vuln/detail/CVE-2024-7106
- https://github.com/SpinaCMS/Spina
- https://github.com/topsky979/Security-Collections/blob/main/cve3/README.md
- https://rubysec.com/advisories/CVE-2024-7106
- https://vuldb.com/?ctiid.272431
- https://vuldb.com/?id.272431
- https://vuldb.com/?submit.376769
CVE-2024-7106 · published · modified · JSON