{"action":"Upgrade passenger to 5.3.2 or later.","affected":[{"fixed":"5.3.2","introduced":"5.3.0"}],"component":"passenger","cve_ids":["CVE-2018-12028"],"ecosystem":"RubyGems","epss":0.00886,"exploited":false,"fixed_versions":["5.3.2"],"ghsa_id":"GHSA-jjhj-8gx7-x836","id":"tcs_01M5KEKXW3FP8AYV9ZDQYBZTV8","modified_at":"2024-02-16T08:04:43.770355Z","published_at":"2022-05-13T01:49:24Z","references":["https://osv.dev/vulnerability/GHSA-jjhj-8gx7-x836","https://nvd.nist.gov/vuln/detail/CVE-2018-12028","https://github.com/phusion/passenger/commit/1e7c82deb4901c438f583737d8c9f2aac264737c","https://blog.phusion.nl/passenger-5-3-2","https://github.com/phusion/passenger","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2018-12028.yml","https://security.gentoo.org/glsa/201807-02"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-jjhj-8gx7-x836","url":"https://osv.dev/vulnerability/GHSA-jjhj-8gx7-x836"}],"summary":"Incorrect Access Control in Phusion Passenger"}