CVE-2017-12097
1 advisory.
RubyGems/delayed_job_web CVE-2017-12097: medium 6.1
delayed_job_web Cross-site Scripting vulnerability
Action: Upgrade delayed_job_web to 1.4.2 or later.
bundle update delayed_job_webAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.9 | 1.4.2 | - |
Fixed versions
| 1.4.2 |
Sources
- osv: GHSA-w7q9-xr2x-wh7x
- https://nvd.nist.gov/vuln/detail/CVE-2017-12097
- https://github.com/ejschmitt/delayed_job_web/commit/6bcb10e61ea2b9a44ffa16be8536dff46ad51449
- https://github.com/ejschmitt/delayed_job_web
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/delayed_job_web/CVE-2017-12097.yml
- https://rubygems.org/gems/delayed_job_web/versions/1.4
- https://web.archive.org/web/20200227132840/http://www.securityfocus.com/bid/102484
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449
CVE-2017-12097 · published · modified · JSON