Description
Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. Reflected XSS issue occurs when /queues is appended with /"><svg%20onload=alert(domain)>. This issue has been patched in version 2.6.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| resque | resque | < 2.6.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | resque | < 2.6.0 | 2.6.0 | GHSA-r9mq-m72x-257g |