4 matches found
Improper Input Validation in simple_form
Incorrect Access Control in filemethod? in lib/simpleform/formbuilder.rb; a user-supplied string is invoked as a method call Impact For pages that build a form using user input, it is possible for an attacker to manipulate the input and send any method present in the form object. For example: erb...
9.8CVSS0.6AI score0.034EPSS
SaveExploits1References7Affected Software1
Design/Logic Flaw
Plataformatec Simple Form has Incorrect Access Control in filemethod? in lib/simpleform/formbuilder.rb, because a user-supplied string is invoked as a method call...
7.5CVSS9.4AI score0.034EPSS
SaveExploits1References3Affected Software1
20