Geokit

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Geokit records in CISA KEV

No Geokit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Geokit-rails 1 record HIGH

Records

1 record

TI-2023-11377 CVE-2023-26153 · GHSA-7xvc-v44j-46fh

OS command injection in geokit-rails

HIGH 81

Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo_location' cookie.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03847 Published 2023-10-06 Fixed in 2.5.0 CWE-78

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0