cbcvebase.

Geokit Geokit-Rails vulnerabilities

1 known vulnerability affecting geokit/geokit-rails.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2023-26153P2CRITICALCVSS 9.8fixed in 2.5.02023-10-06
CVE-2023-26153 [CRITICAL] CWE-78 CVE-2023-26153: Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** An attacker can use this vulnerability to execute commands on the host system.
ghsanvdosv
Geokit Geokit-Rails vulnerabilities | cvebase