Vulnerability Spotlight: Ruby Rails Gem XSS Vulnerabilities
Cisco Talos discovered two XSS vulnerabilities in the filter functionality of the Ruby Rails gems delayed_job_web version 1.4 and rails_admin version 1.2.0, tracked as CVE-2017-12097 and CVE-2017-12098. A specially crafted URL can execute arbitrary...