VYPR
Moderate severityNVD Advisory· Published Oct 15, 2019· Updated Aug 5, 2024

CVE-2017-1002201

CVE-2017-1002201

Description

In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attributes, potentially executing code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
hamlRubyGems
< 5.0.05.0.0

Affected products

233

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.