Lucene search
+L

2 matches found

OSV
OSV
added 2024/02/29 12:0 a.m.16 views

UBUNTU-CVE-2024-27285

YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting XSS attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in...

6.1CVSS7.1AI score0.0106EPSS
SaveExploits1References9
OSV
OSV
added 2024/02/28 8:15 p.m.4 views

DEBIAN-CVE-2024-27285

YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting XSS attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in...

6.1CVSS6.5AI score0.0106EPSS
SaveExploits1References1
Rows per page
Query Builder