← All advisories

Critical severity9.8NVD Advisory· Published Aug 3, 2018· Updated Jun 17, 2026

CVE-2018-3777

CVE-2018-3777

Description

Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
restforceRubyGems	< 3.0.0	3.0.0

Affected products

3

Restforce/Restforce
cpe:2.3:a:restforce:restforce:*:*:*:*:*:ruby:*:*
Range: <3.0.0
ghsa-coords
pkg:gem/restforce
Range: < 3.0.0
https://github.com/restforce/restforce ruby gemv5
Range: 3.0.0

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-534w-937m-v7x3ghsaADVISORY
github.com/restforce/restforce/pull/392nvdIssue TrackingThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-3777ghsaADVISORY
github.com/rubysec/ruby-advisory-db/blob/master/gems/restforce/CVE-2018-3777.ymlghsaWEB

News mentions

0

No linked articles in our index yet.