Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedule_job}" or "args" parameter in /resque/delayed/jobs/{schedule_job}?args={args_id} to execute javascript at client side.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Resque Scheduler 跨站脚本漏洞
Vulnerability Description
Resque Scheduler是Resque开源的一个基于 Resque 构建的轻量级作业调度系统。 Resque Scheduler 1.27.4版本存在安全漏洞，该漏洞源于容易受到跨站脚本(XSS)攻击，远程攻击者可以将javascript代码注入到/resque/delayed/jobs/{schedule_job}?args={args_id} 中的{schedule_job}或args参数，从而在客户端执行javascript。
CVSS Information
N/A
Vulnerability Type
N/A