CVE-2015-4619

RubyGems/spina CVE-2015-4619: high 8.8, EPSS 0.90%

Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability

Action: Upgrade spina to 0.6.29 or later.

bundle update spina

Affected

Fixed versions

Sources

• osv: GHSA-2hxv-mx8x-mcj9
• https://nvd.nist.gov/vuln/detail/CVE-2015-4619
• https://github.com/denkGroot/Spina/commit/bfe44f289e336f80b6593032679300c493735e75
• https://github.com/denkGroot/Spina
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spina/CVE-2015-4619.yml
• http://www.openwall.com/lists/oss-security/2015/06/16/11
• http://www.openwall.com/lists/oss-security/2015/06/16/20
• http://www.securityfocus.com/bid/75216

CVE-2015-4619 · published 2018-08-28T22:34:22Z · modified 2024-02-16T08:14:22.693287Z · JSON