Medium severity6.3NVD Advisory· Published Dec 21, 2023· Updated Jun 17, 2026
CVE-2023-50724
CVE-2023-50724
Description
Resque (pronounced like "rescue") is a Redis-backed library for creating background jobs, placing those jobs on multiple queues, and processing them later. resque-web in resque versions before 2.1.0 are vulnerable to reflected XSS through the current_queue parameter in the path of the queues endpoint. This issue has been patched in version 2.1.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
resqueRubyGems | < 2.1.0 | 2.1.0 |
Affected products
3Patches
Vulnerability mechanics
References
7- github.com/resque/resque/pull/1687nvdPatchWEB
- github.com/resque/resque/issues/1679nvdExploitIssue TrackingMitigationThird Party AdvisoryWEB
- github.com/advisories/GHSA-r8xx-8vm8-x6wjghsaADVISORY
- github.com/resque/resque/security/advisories/GHSA-r8xx-8vm8-x6wjnvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2023-50724ghsaADVISORY
- github.com/resque/resque/commit/e8e2367fff6990d13109ec2483a456a05fbf9811ghsaWEB
- github.com/rubysec/ruby-advisory-db/blob/master/gems/resque/CVE-2023-50724.ymlghsaWEB
News mentions
0No linked articles in our index yet.