Lucene search

Cross Site Scripting (XSS)

🗓️ 19 Dec 2023 07:53:05Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

Resque software has a Reflected Cross Site Scripting (XSS) vulnerability on the `/queues` endpoint due to unsanitized inpu

Reporter	Title	Published	Views	Family All 9
Prion	Cross site scripting	22 Dec 202321:15	–	prion
RubySec	Resque vulnerable to reflected XSS in Queue Endpoint	17 Dec 202321:00	–	rubygems
NVD	CVE-2023-50727	22 Dec 202321:15	–	nvd
Cvelist	CVE-2023-50727 Resque vulnerable to reflected XSS in Queue Endpoint	22 Dec 202320:10	–	cvelist
CVE	CVE-2023-50727	22 Dec 202321:15	–	cve
OSV	Resque vulnerable to reflected XSS in Queue Endpoint	18 Dec 202319:33	–	osv
OSV	CVE-2023-50727	22 Dec 202321:15	–	osv
RedhatCVE	CVE-2023-50727	26 Dec 202307:30	–	redhatcve
Github Security Blog	Resque vulnerable to reflected XSS in Queue Endpoint	18 Dec 202319:33	–	github

Vulners

Node

veracode resqueRange2.5.0–2.5.0

Source	Link
github	www.github.com/resque/resque/commit/7623b8dfbdd0a07eb04b19fb25b16a8d6f087f9a
github	www.github.com/resque/resque/pull/1865
github	www.github.com/advisories/GHSA-r9mq-m72x-257g
github	www.github.com/resque/resque/security/advisories/GHSA-r9mq-m72x-257g

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Dec 2023 07:05Current

5.5Medium risk

Vulners AI Score5.5

CVSS36.3

EPSS0.001