texpert/florsan

View on GitHub

Showing 2 of 2 total issues

Camaleon CMS vulnerable to Stored Cross-site Scripting
Open

    camaleon_cms (2.7.5)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2018-18260

Criticality: Medium

URL: http://packetstormsecurity.com/files/149772/CAMALEON-CMS-2.4-Cross-Site-Scripting.html

Solution: remove or disable this gem until a patch is available!

Unknown environment local.
Open

Rails.application.config.log_file_size = 100 * 1024 * 1024 if Rails.env.local?

This cop checks that environments called with Rails.env predicates exist.

Example:

# bad
Rails.env.proudction?

# good
Rails.env.production?
Severity
Category
Status
Source
Language