camaleon_cms affected by cross site scripting
Published: October 23, 2024
SECURITY IDENTIFIERS
- CVE: CVE-2024-48652 (NVD)
- GHSA: GHSA-hhxg-rvc9-8726
GEM
SEVERITY
CVSS v3.x: 4.8 (Medium)
PATCHED VERSIONS
>= 2.8.0
DESCRIPTION
Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the content group name field.
RELATED
- https://nvd.nist.gov/vuln/detail/CVE-2024-48652
- https://rubygems.org/gems/camaleon_cms/versions/2.8.0
- https://github.com/owen2345/camaleon-cms/releases/tag/2.8.0
- https://github.com/owen2345/camaleon-cms/blob/master/CHANGELOG.md#280-2024-07-26
- https://github.com/owen2345/camaleon-cms/compare/2.7.5...2.8.0
- https://github.com/owen2345/camaleon-cms/pull/1075/changes/1de553b759fde08f7b31ef97d41982d47ec3de94
- https://github.com/owen2345/camaleon-cms/pull/1075
- https://github.com/paragbagul111/CVE-2024-48652
- https://github.com/advisories/GHSA-hhxg-rvc9-8726