RubySec

Providing security resources for the Ruby community

CVE-2023-3445 (spina): Spina Cross-site Scripting vulnerability

ADVISORIES

GEM

spina

SEVERITY

CVSS v3.x: 3.5 (Low)

PATCHED VERSIONS

  • >= 2.15.1

DESCRIPTION

Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1.

RELATED

Contact us @rubysec or open an issue on our GitHub repository.

Recent Advisories