CVE-2019-16676
Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is invoked as a method call.
CVSS 3.1 · 9.8 Critical
EPSS 3.4%
KEV · Not listed
Vendors
Products