Articles by KENNETH

USN-4562-1: kramdown vulnerability It was discovered that kramdown insecurely handled certain crafted input. An attacker could use this vulnerability to read restricted files or execute arbitrary code. Source: USN-4562-1: kramdown vulnerability

USN-4561-1: Rack vulnerabilities It was discovered that Rack incorrectly handled certain paths. An attacker could possibly use this issue to obtain sensitive information. (CVE-2020-8161) It was discovered that Rack incorrectly validated cookies. An attacker could possibly use this issue to forge a secure cookie. (CVE-2020-8184) Source: USN-4561-1: Rack vulnerabilities

USN-4560-1: Gon gem vulnerability It was discovered that Gon gem did not properly escape certain input. An attacker could use this vulnerability to execute a cross-site scripting (XSS) attack. Source: USN-4560-1: Gon gem vulnerability