← Back

Delayed Job Web

delayed_job_web

Vendor: Delayed Job Web Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-12097
1Delayed Job Web Project
1Delayed Job Web
Nov 21, 2024
Jan 19, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able t...Show more
An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish an authenticated user to trigger this vulnerability.Show less