CVE-2018-3777

Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.

Score

CVSS 3.1 9.8 Critical

Status

Modified - support@hackerone.com

Published

2018-08-03

Last modified

2024-09-17

Weaknesses

CWE-172, CWE-20

Affected products

• Restforce Ruby Gem (Httpsgithub.comrestforce)
• Restforce (Restforce)

References

• https://github.com/restforce/restforce/pull/392