Lucene search
+L

1 matches found

RubySec
RubySec
added 2019/07/26 12:0 a.m.40 views

SQL injection vulnerability via Marginalia::Comment

The 'marginalia' gem is affected by a SQL Injection vulnerability. All SQL queries are affected when a user controller argument is added as a component. This affects users that add a component that is user controller, for instance a parameter or a header. The issue is resolved in version 1.6...

9.8CVSS3.8AI score0.01381EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder