17Oca
CVE-2024-22411 | avo up to 2.x on Ruby Notifications Avo::BaseAction cross site scripting (GHSA-g8vp-2v5p-9qfh)
A vulnerability was found in avo up to 2.x on Ruby. It has been classified as problematic. Affected is the functionAvo::BaseAction
of the component Notifications Handler. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2024-22411. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.