Vulnerabilities

CVE-2018-3777 | BDVDB-2026-105489 Detail

https://github.com/restforcerestforce ruby gem

Description#

Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-20 Improper Input Validation

References#

https://github.com/restforce/restforce/pull/392

Exploit#

No public exploit known

History#

Version 12018-08-03Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.