CVE-2018-1000855

RubyGems/easymon CVE-2018-1000855: medium 6.1, EPSS 0.90%

Cross Site Scripting (XSS) vulnerability in easymon

Action: Upgrade easymon to 1.4.1 or later.

bundle update easymon

Affected

Fixed versions

Sources

• osv: GHSA-c289-47qf-rvrr
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000855
• https://github.com/basecamp/easymon/issues/26
• https://github.com/basecamp/easymon/pull/25
• https://github.com/basecamp/easymon
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/easymon/CVE-2018-1000855.yml

CVE-2018-1000855 · published 2018-12-21T17:46:03Z · modified 2024-02-16T08:12:15.871377Z · JSON