VYPR

Multi XML

by Erik Michaels Ober

Source repositories

CVEs (1)

  • CVE-2013-0175Apr 25, 2013
    risk 0.00cvss epss 0.04

    multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU…