CVE-2018-3777

Published August 3rd, 2018

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

1

PROJECT

Description

Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.

restforce/restforce

A Ruby client for the Salesforce REST API.

GitHub

824