critical9.8
CVE-2018-3777
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
Impact
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Restforce | Restforce | before 3.0.0 |