Friday, January 19, 2018

CVE-2017-12098

Description. An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim's browser. An attacker can phish ...

from Google Alert - vulnerability http://ift.tt/2mTC8k4
via IFTTT

No comments:

Post a Comment