Plataformatec

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Plataformatec records in CISA KEV

No Plataformatec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Devise 3 records MEDIUM Simple Form 1 record MEDIUM

Records

1 record in Simple Form · all components

TI-2019-12472 CVE-2019-16676 · GHSA-r74q-gxcg-73hx

Plataformatec Simple Form has Incorrect Access Control in file_method? in…

MEDIUM 48

Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is invoked as a method call.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.034 Published 2019-09-30 Fixed in 5.0.0 CWE-20

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0