Skip to content
OpenAdvisories

Package · RubyGems

geokit-rails

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.3
    CVE-2023-26153

    geokit-rails Command Injection vulnerability

    Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie. This issue can be exploited remotely via a malicious cookie value. **Note:** An attacker can use this…

    geokit-rails RubyGems