Description

Action Pack is a framework for handling and responding to web requests. Since 6.1.0, the application configurable Permissions-Policy is only served on responses with an HTML related Content-Type. This vulnerability is fixed in 6.1.7.8, 7.0.8.2, and 7.1.3.3.

Remediation

References

CVE-2024-28103

Related Vulnerabilities

WordPress Plugin Wise Agent Lead Capture Forms Cross-Site Scripting (1.0)

Jenkins CVE-2017-2602 Vulnerability (CVE-2017-2602)

WordPress Plugin Blogroll Fun-Show Last Post and Last Update Time Cross-Site Scripting (0.8.4)

MediaWiki CVE-2019-12472 Vulnerability (CVE-2019-12472)

Drupal Core 4.7.x SQL Injection (4.7.0 - 4.7.8)

Severity

Critical

Classification

CVE-2024-28103 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities