Lucene search
Veracode Vulnerability DatabaseVERACODE:45847HistoryMar 13, 2024 - 5:13 a.m.
Unsafe Reflection
2024-03-1305:13:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
stimulus_reflex
vulnerability
unsafe reflection
validation
methods
client-side interaction
software
stimulus_reflex is vulnerable to Unsafe Reflection. The vulnerability is due to insufficient validation of methods that can be called on Reflex instances. This vulnerability allows attackers to execute methods not intended for client-side interaction.
References
seclists.org/fulldisclosure/2024/Mar/16
github.com/stimulusreflex/stimulus_reflex/blob/0211cad7d60fe96838587f159d657e44cee51b9b/app/channels/stimulus_reflex/channel.rb#L83
github.com/stimulusreflex/stimulus_reflex/commit/538582d240439aab76066c72335ea92096cd0c7f
github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.4.2
github.com/stimulusreflex/stimulus_reflex/releases/tag/v3.5.0.rc4
github.com/stimulusreflex/stimulus_reflex/security/advisories/GHSA-f78j-4w3g-4q65
Related
github
github
StimulusReflex arbitrary method call
2024-03-12 15:44:49
cve
cve
CVE-2024-28121
2024-03-12 20:15:08
prion
prion
Design/Logic Flaw
2024-03-12 20:15:00
cvelist
cvelist
CVE-2024-28121 Reflex arbitrary method call in stimulus_reflex
2024-03-12 19:44:29
packetstorm
packetstorm
StimulusReflex 3.5.0 Arbitrary Code Execution
2024-03-14 00:00:00
zdt
zdt
StimulusReflex 3.5.0 Arbitrary Code Execution Exploit
2024-03-14 00:00:00
osv
osv
CVE-2024-28121
2024-03-12 20:15:08