3 matches found
CVE-2018-3777
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests...
9.8CVSS9.4AI score
SaveExploits0References1
CVE-2018-3777
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests...
9.8CVSS9.3AI score0.01506EPSS
SaveExploits0References1
CVE-2018-3777
CVE-2018-3777 affects the Ruby gem restforce, prior to version 3.0.0. The vulnerability stems from insufficient URI encoding, allowing an attacker to inject arbitrary parameters into Salesforce API requests. Reported impact includes the ability to override HTTP methods via request parameters (e.g...
9.8CVSS9.2AI score0.01506EPSS
SaveExploits0References1Affected Software1
20