Security Advisory
CVE-2024-27285
5.4
MEDIUM
Vulnerability Description
YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in 0.9.36.
Published Date
February 28, 2024
Official Source
NIST NVD Advisory