CVE-2023-50725
1 advisory.
RubyGems/resque CVE-2023-50725: medium 6.3
Resque vulnerable to reflected XSS in resque-web failed and queues lists
Action: Upgrade resque to 2.2.1 or later.
bundle update resqueAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.1 | - |
Fixed versions
| 2.2.1 |
Sources
- osv: GHSA-gc3j-vvwf-4rp8
- https://github.com/resque/resque/security/advisories/GHSA-gc3j-vvwf-4rp8
- https://nvd.nist.gov/vuln/detail/CVE-2023-50725
- https://github.com/resque/resque/pull/1790
- https://github.com/resque/resque/commit/ee99d2ed6cc75d9d384483b70c2d96d312115f07
- https://github.com/resque/resque
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/resque/CVE-2023-50725.yml
CVE-2023-50725 · published · modified · JSON