Publish Advisories

GHSA-v3rr-cph9-2g2q
GHSA-5v6q-xqq8-g4xj
GHSA-xfxv-f945-4qv6
This commit is contained in:
advisory-database[bot]
2025-04-13 23:05:12 +00:00
parent bd0ddcd40e
commit e15277067a
3 changed files with 9 additions and 8 deletions
@@ -1,14 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v3rr-cph9-2g2q",
"modified": "2023-01-23T18:02:54Z",
"modified": "2025-04-13T23:03:25Z",
"published": "2017-10-24T18:33:36Z",
"aliases": [
"CVE-2014-2538"
],
"summary": "rack-ssl Cross-site Scripting vulnerability",
"details": "Cross-site scripting (XSS) vulnerability in `lib/rack/ssl.rb` in the rack-ssl gem before 1.4.0 for Ruby allows remote attackers to inject arbitrary web script or HTML via a URI, which might not be properly handled by third-party adapters such as JRuby-Rack.",
"severity": [],
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
{
"package": {
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v6q-xqq8-g4xj",
"modified": "2024-10-21T21:57:13Z",
"modified": "2025-04-13T23:04:23Z",
"published": "2022-05-17T01:37:42Z",
"aliases": [
"CVE-2012-6132"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xfxv-f945-4qv6",
"modified": "2022-12-12T16:00:03Z",
"modified": "2025-04-13T23:03:43Z",
"published": "2022-05-17T00:13:54Z",
"aliases": [
"CVE-2014-0086"
@@ -77,10 +77,6 @@
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2014-0335.html"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/57053"
}
],
"database_specific": {