Skip to content
OpenAdvisories

Package · RubyGems

multi_xml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    CVE-2013-0175

    Improper Input Validation in multi_xml

    multi_xml gem 0.5.2 for Ruby, as used in Grape before 0.2.6 and possibly other products, does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of serv…

    multi_xml RubyGems