CyberSecBulletin

Geokit-rails vulnerabilities

We track 1 vulnerability in Geokit-rails products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2023.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Geokit-rails vulnerabilities

  • 9.8 Critical severity

    geokit-rails: Deserialization of Untrusted Data

    CVE-2023-26153Geokit-railsEPSS 3.85%

    Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** An attacker can use this