Contents

---
gem: delayed_job_web
cve: 2017-12097
url: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0449
date: 2018-01-10
title: delayed_job_web ruby gem XSS vulnerability via `queues` parameter
description: |
  An exploitable cross site scripting (XSS) vulnerability exists in the
  filter functionality of the delayed_job_web ruby gem. A specially crafted
  URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary
  javascript on the victim's browser. An attacker can phish an authenticated user
  to trigger this vulnerability.

cvss_v3: 6.1

patched_versions:
  - ">= 1.4.2"

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/delayed_job_web/CVE-2017-12097.yml