Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/03/12 7:44 p.m.71 views

CVE-2024-28121 Reflex arbitrary method call in stimulus_reflex

stimulusreflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and passing them to Rails over real-time websockets. In affected versions more methods than expected can be called on reflex instances. Being able to call some of them has security...

8.8CVSS8.8AI score0.01555EPSS
SaveExploits3References6
Rows per page
Query Builder