search

Rachelmorrell / docs-travis-ci-com

The Travis CI Documentation
http://docs.travis-ci.com
2 stars 0 forks source link

WS-2017-0183 Medium Severity Vulnerability detected by WhiteSource #112

Closed mend-bolt-for-github[bot] closed 5 years ago

mend-bolt-for-github[bot] commented 5 years ago

WS-2017-0183 - Medium Severity Vulnerability

Vulnerable Library - middleman-core-3.4.1.gem

A static site generator. Provides dozens of templating languages (Haml, Sass, Compass, Slim, CoffeeScript, and more). Makes minification, compression, cache busting, Yaml data (and more) an easy part of your development cycle.

path: /var/lib/gems/2.3.0/cache/middleman-core-3.4.1.gem

Library home page: https://rubygems.org/gems/middleman-core-3.4.1.gem

Dependency Hierarchy: - middleman-syntax-3.0.0.gem (Root Library) - :x: **middleman-core-3.4.1.gem** (Vulnerable Library)

Vulnerability Details

Affected versions of the package are vulnerable to Cross-Site Request Forgery (CSRF) attacks.

Publish Date: 2017-04-03

URL: WS-2017-0183

CVSS 2 Score Details (5.9)

Base Score Metrics not available

Suggested Fix

Type: Change files

Origin: https://github.com/middleman/middleman/commit/b7886aa14cd68a6a3a7b02c7777b5922de4280f1

Release Date: 2016-02-15

Fix Resolution: Replace or update the following file: rack.rb

Step up your Open Source Security Game with WhiteSource here

stale[bot] commented 5 years ago

Thanks for contributing to this issue. As it has been 90 days since the last activity, we are automatically closing the issue. This is often because the request was already solved in some way and it just wasn't updated or it's no longer applicable. If that's not the case, please do feel free to either reopen this issue or open a new one. We'll gladly take a look again! You can read more here: https://blog.travis-ci.com/2018-03-09-closing-old-issues