delayed_job_web 1.0.3
1 security vulnerability
found in version
1.0.3
delayed_job_web ruby gem XSS vulnerability via queues parameter
medium severity
CVE-2017-12097
Patched versions:
>= 1.4.2
An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web ruby gem. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
Author did not declare license for this gem in the gemspec.
This gem version has a MIT license in the source code, however it was not declared in the gemspec file.
This gem version is available.
This gem version has not been yanked and is still available for usage.