Debian/ruby-rodauth: unknown
Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested_location, and two_factor_auth_return_to_requested_location features. Attackers
Action: Upgrade ruby-rodauth to 2.47.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.47.0-1 | - |
Fixed versions
| 2.47.0-1 |
Sources
published · modified · JSON