Design/Logic Flaw

2023-12-2115:15:00

PRIOn knowledge base

www.prio-n.com

resque

redis

background jobs

reflected xss

security patch

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

JSON

Resque (pronounced like “rescue”) is a Redis-backed library for creating background jobs, placing those jobs on multiple queues, and processing them later. resque-web in resque versions before 2.1.0 are vulnerable to reflected XSS through the current_queue parameter in the path of the queues endpoint. This issue has been patched in version 2.1.0.