WS-2017-0183 Medium Severity Vulnerability detected by WhiteSource
mend-bolt-for-github opened this issue · comments
WS-2017-0183 - Medium Severity Vulnerability
Vulnerable Library - middleman-core-3.4.1.gem
A static site generator. Provides dozens of templating languages (Haml, Sass, Compass, Slim, CoffeeScript, and more). Makes minification, compression, cache busting, Yaml data (and more) an easy part of your development cycle.
path: /var/lib/gems/2.3.0/cache/middleman-core-3.4.1.gem
Library home page: https://rubygems.org/gems/middleman-core-3.4.1.gem
Dependency Hierarchy:
- middleman-syntax-3.0.0.gem (Root Library)
- ❌ middleman-core-3.4.1.gem (Vulnerable Library)
Vulnerability Details
Affected versions of the package are vulnerable to Cross-Site Request Forgery (CSRF) attacks.
Publish Date: 2017-04-03
URL: WS-2017-0183
CVSS 2 Score Details (5.9)
Base Score Metrics not available
Suggested Fix
Type: Change files
Origin: middleman/middleman@b7886aa
Release Date: 2016-02-15
Fix Resolution: Replace or update the following file: rack.rb
Step up your Open Source Security Game with WhiteSource here
Thanks for contributing to this issue. As it has been 90 days since the last activity, we are automatically closing the issue. This is often because the request was already solved in some way and it just wasn't updated or it's no longer applicable. If that's not the case, please do feel free to either reopen this issue or open a new one. We'll gladly take a look again! You can read more here: https://blog.travis-ci.com/2018-03-09-closing-old-issues