Filtered by vendor Plataformatec Subscriptions
Filtered by product Simple Form Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-16676 1 Plataformatec 1 Simple Form 2019-10-04 9.8 Critical
Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is invoked as a method call.