Moderate severityNVD Advisory· Published Dec 22, 2023· Updated Apr 23, 2025
Resque vulnerable to reflected XSS in Queue Endpoint
CVE-2023-50727
Description
Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. Reflected XSS issue occurs when /queues is appended with /"><svg%20onload=alert(domain)>. This issue has been patched in version 2.6.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
resqueRubyGems | < 2.6.0 | 2.6.0 |
Affected products
2Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-r9mq-m72x-257gghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-50727ghsaADVISORY
- github.com/resque/resque/commit/7623b8dfbdd0a07eb04b19fb25b16a8d6f087f9aghsax_refsource_MISCWEB
- github.com/resque/resque/pull/1865ghsax_refsource_MISCWEB
- github.com/resque/resque/security/advisories/GHSA-r9mq-m72x-257gghsax_refsource_CONFIRMWEB
- github.com/rubysec/ruby-advisory-db/blob/master/gems/resque/CVE-2023-50727.ymlghsaWEB
News mentions
0No linked articles in our index yet.