Vigilance.fr - Rails: Cross Site Scripting via SafeBuffer#bytesplice(), analyzed on 05/04/2023
June 2023 by Vigilance.fr
An attacker can trigger a Cross Site Scripting of Rails, via SafeBuffer#bytesplice(), in order to run JavaScript code in the context of the web site.