Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Twitter records in CISA KEVNo Twitter vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 30
In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.0183 · Published 2020-01-23 · Partial fix · 3.8.0, 5.1.0 +1 CWE-95
Priority LOW 28
In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0.
CVSS 3.1MEDIUM 5.8· Network · No auth · No interaction · EPSS 0.01209 · Published 2020-01-23 · Partial fix · 3.9.0, 5.2.0 +1 CWE-113
