Описание
grape subject to Cross-site Scripting
The grape rubygem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2018-3769
- https://github.com/ruby-grape/grape/issues/1762
- https://github.com/ruby-grape/grape/pull/1763
- https://github.com/ruby-grape/grape/commit/6876b71efc7b03f7ce1be3f075eaa4e7e6de19af
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/grape/CVE-2018-3769.yml
Пакеты
Наименование
grape
rubygems
Затронутые версииВерсия исправления
< 1.1.0
1.1.0
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 7 лет назад
ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.
CVSS3: 6.1
nvd
больше 7 лет назад
ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.
CVSS3: 6.1
debian
больше 7 лет назад
ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerab ...