wiseadvice_public_repos
/
bundle-audit-results
3
0
Fork 0
Code Wiki

commit by to_remotes 2024-05-02 09:24:52 +0200 from vmdevac

main
ag 2024-05-02 09:24:52 +02:00
parent b7a3bde0d6
commit a48e8f0100
4 changed files with 22 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bundle-audit-time.txt
View File

@ -1 +1 @@
2024-04-26T14:46:21+02:00 2024-05-02T09:24:51+02:00

2
bundle-audit.json
View File

@ -1 +1 @@
{"version":"0.9.1","created_at":"2024-04-26 14:46:20 +0200","results":[]} {"version":"0.9.1","created_at":"2024-05-02 09:24:51 +0200","results":[{"type":"unpatched_gem","gem":{"name":"sidekiq","version":"7.2.0"},"advisory":{"path":"/home/wiseadvice/.local/share/ruby-advisory-db/gems/sidekiq/CVE-2024-32887.yml","id":"CVE-2024-32887","url":"https://github.com/sidekiq/sidekiq/security/advisories/GHSA-q655-3pj8-9fxq","title":"Reflected XSS in Metrics Web Page","date":"2024-04-26","description":"Reflected XSS in Sidekiq Web UI via the `/metrics` HTTP end-point and the\n`substr` query param:\n\n https://{host}/sidekiq/metrics?substr=foot%22%3E%3Cscript%20src=%22{payload}%22%20/%3E\n","cvss_v2":null,"cvss_v3":5.5,"cve":"2024-32887","osvdb":null,"ghsa":"GHSA-q655-3pj8-9fxq","unaffected_versions":["< 7.2.0"],"patched_versions":[">= 7.2.4"],"criticality":"medium"}}]}

11
report.txt
View File

@ -1 +1,10 @@
No vulnerabilities found Name: sidekiq
Version: 7.2.0
CVE: CVE-2024-32887
GHSA: GHSA-GHSA-q655-3pj8-9fxq
Criticality: Medium
URL: https://github.com/sidekiq/sidekiq/security/advisories/GHSA-q655-3pj8-9fxq
Title: Reflected XSS in Metrics Web Page
Solution: upgrade to '>= 7.2.4'
Vulnerabilities found!

14
update-info.txt
View File

@ -1,7 +1,13 @@
Updating ruby-advisory-db ... Updating ruby-advisory-db ...
Already up to date. Updating 2b58e06..e97ec3f
Fast-forward
gems/sidekiq/CVE-2023-1892.yml | 2 +-
gems/sidekiq/CVE-2024-32887.yml | 22 ++++++++++++++++++++++
spec/advisory_example.rb | 4 ++++
3 files changed, 27 insertions(+), 1 deletion(-)
create mode 100644 gems/sidekiq/CVE-2024-32887.yml
Updated ruby-advisory-db Updated ruby-advisory-db
ruby-advisory-db: ruby-advisory-db:
advisories: 885 advisories advisories: 886 advisories
last updated: 2024-04-25 04:57:39 -0700 last updated: 2024-04-27 10:51:58 -0700
commit: 2b58e06609a927d4f980b4d8b67806133a9fabd8 commit: e97ec3fecb8c15a86ac15b55ecfdc0e61142c366