geokit/geokit-rails

geokit/geokit-rails

GitHubGitHub
GitHubgithub.com
Releases6
Frequency11 months 3 days
Last Release
Stars1.59K
Official Geokit plugin for Rails/ActiveRecord. Provides location-based goodness for your Rails app. Requires the Geokit gem.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-26153↗
8.3 HIGH—

Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** An attacker can use this vulnerability to execute commands on the host system.