Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-12028
6.8
MEDIUMCVSS v2
Published
June 17, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawning a child process, to report an arbitrary different PID back to Passenger's process manager. If the malicious application then generates an error, it would cause Passenger's process manager to kill said reported arbitrary PID.
phusion/passenger
GitHubA fast and robust web server and application server for Ruby, Python and Node.js
GitHubA fast and robust web server and application server for Ruby, Python and Node.js>= 5.3.0, < 5.3.2NVD