File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ ---
2+ gem : dalli
3+ cve : 2022-4064
4+ ghsa : 3xg8-cc8f-9wv2
5+ url : https://github.com/petergoldstein/dalli/issues/932
6+ title : Unsanitized input leading to code injection in Dalli
7+ date : 2022-11-19
8+ description : |
9+ A vulnerability was found in Dalli. Affected is the function self.meta_set
10+ of the file lib/dalli/protocol/meta/request_formatter.rb of the component Meta Protocol
11+ Handler. The manipulation leads to injection. The exploit has been disclosed to
12+ the public and may be used. The name of the patch is 48d594dae55934476fec61789e7a7c3700e0f50d.
13+ It is recommended to apply a patch to fix this issue.
14+ patched_versions :
15+ - " >= 3.2.3"
16+ related :
17+ url :
18+ - https://github.com/petergoldstein/dalli/pull/933
19+ - https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d
You can’t perform that action at this time.
0 commit comments