Unrated
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
CVE-2018-3777
First seen on SecPulse
Original description The description as published by the source.
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- report github.com