heartcombo/simple_form

heartcombo/simple_form

GitHubGitHub
GitHubgithub.com
blog.plataformatec.com.brblog.plataformatec.com.br
Releases61
Frequency3 months 5 days
Last Release
Stars8.23K
Forms made easy for Rails! It's tied to a simple DSL, with no opinion on markup.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-16676↗
9.8 CRITICAL7.5 HIGH

Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is invoked as a method call.