CVE-2018-3769: grape subject to Cross-site Scripting – CVSS 6.1 · Watchpost

← All vulnerabilities

grape subject to Cross-site Scripting

보통 6.1CVE-2018-3769 · GHSA-f599-5m7p-hcpf · Published 05/07/2018 · updated 17/06/2026

요약

CVE-2018-3769은(는) grape, grape (ruby-grape)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.4%, 전체 취약점의 73.1%보다 높음.
조치: 1.1.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
grape RubyGems	`< 1.1.0`	`1.1.0`
grape ruby-grape	`≤ 1.0.3`	No fix yet

Description

The grape rubygem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.

NVD description

ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter.

References

nvd.nist.gov/vuln/detail/CVE-2018-3769 · ADVISORY
ruby-grape/grape · WEB
ruby-grape/grape#1763 · WEB
ruby-grape/grape commit 6876b71 · WEB
rubysec/ruby-advisory-db · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free