Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/02/28 7:22 p.m.52 views

CVE-2024-27285 YARD's default template vulnerable to Cross-site Scripting in generated frames.html

YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting XSS attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in...

5.4CVSS5.4AI score0.0106EPSS
SaveExploits1References7
Rows per page
Query Builder