CVE-2022-44303
1 advisory.
RubyGems/resque-scheduler CVE-2022-44303: medium 6.3
Resque Scheduler Reflected XSS In Delayed Jobs View
Action: Upgrade resque-scheduler to 4.10.2 or later.
bundle update resque-schedulerAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.27.4 | 4.10.2 | - |
Fixed versions
| 4.10.2 |
Sources
- osv: GHSA-9hmq-fm33-x4xx
- https://github.com/resque/resque-scheduler/security/advisories/GHSA-9hmq-fm33-x4xx
- https://nvd.nist.gov/vuln/detail/CVE-2022-44303
- https://github.com/resque/resque-scheduler
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/resque-scheduler/CVE-2022-44303.yml
- https://trungvm.gitbook.io/cves/resque/resque-1.27.4-multiple-reflected-xss-in-resque-schedule-job
CVE-2022-44303 · published · modified · JSON