CyberSecBulletin

Phlex-ruby vulnerabilities

We track 2 vulnerabilities in Phlex-ruby products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2024.

2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score

Latest Phlex-ruby vulnerabilities

  • 7.1 High severity

    phlex: Improper Neutralization of Input During Web Page Generation

    CVE-2024-32970Phlex-ruby

    Phlex is a framework for building object-oriented views in Ruby. In affected versions there is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. Since the last two vulnerabilities https://github.com/p

  • 7.1 High severity

    phlex: Improper Neutralization of Input During Web Page Generation

    CVE-2024-32463Phlex-ruby

    phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. The filter to detect and prevent the use of the `javascript:` U