Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-50727

Resque vulnerable to reflected XSS in Queue Endpoint

Description

Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. Reflected XSS issue occurs when /queues is appended with /"><svg%20onload=alert(domain)>. This issue has been patched in version 2.6.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

resque resque

  • < 2.6.0affected

References