CVE-2021-35514

Description

Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.

Affected Platforms

Weakness Type

CWE-94

References

• https://github.com/whiteleaf7/narou/blob/develop/ChangeLog.md#380-20210627
• https://vuln.ryotak.me/advisories/51
• https://github.com/whiteleaf7/narou/blob/develop/ChangeLog.md#380-20210627
• https://vuln.ryotak.me/advisories/51