Executive brief
YARD's default template vulnerable to Cross-site Scripting in generated frames.html
Affected products
- RubyGems yard
Junglewise Threat Intelligence
CVE-2024-27285: YARD's default template vulnerable to Cross-site Scripting in generated frames.html
CVE-2024-27285 · Severity: low · CVSS 3.1 · Published 2024-02-28
Technologies: yard (RubyGems). Vendors: RubyGems.