CVE-2018-3769

Published July 5th, 2018

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.

ruby-grape/grape

An opinionated framework for creating REST-like APIs in Ruby.

GitHub

9.99K