Lucene search
+L

1 matches found

RubySec
RubySec
added 2023/06/06 12:0 a.m.29 views

avo possible unsafe reflection / partial DoS vulnerability

Summary The polymorphic field type stores the classes to operate on when updating a record with user input, and does not validate them in the back end. This can lead to unexpected behavior, remote code execution, or application crashes when viewing a manipulated record. Details After reviewing th...

8.8CVSS7.7AI score0.0161EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder