CVE-2024-27285

YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in 0.9.36.

• CWE-79
• CWE-79

• https://github.com/lsegal/yard/commit/1fcb2d8b316caf8779cfdcf910715e9ab583f0aaPatch
• https://github.com/lsegal/yard/commit/2069e2bf08293bda2fcc78f7d0698af6354054bePatch
• https://github.com/lsegal/yard/pull/1538Issue Tracking, Patch
• https://github.com/lsegal/yard/security/advisories/GHSA-8mq4-9jjh-9xrcExploit, Vendor Advisory
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2024-27285.ymlExploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/03/msg00006.htmlMailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MR3Z2E2UIZZ7YOR7R645EVSBGWMB2RGA/Mailing List
• https://github.com/lsegal/yard/commit/1fcb2d8b316caf8779cfdcf910715e9ab583f0aaPatch
• https://github.com/lsegal/yard/commit/2069e2bf08293bda2fcc78f7d0698af6354054bePatch
• https://github.com/lsegal/yard/pull/1538Issue Tracking, Patch
• https://github.com/lsegal/yard/security/advisories/GHSA-8mq4-9jjh-9xrcExploit, Vendor Advisory
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yard/CVE-2024-27285.ymlExploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/03/msg00006.htmlMailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MR3Z2E2UIZZ7YOR7R645EVSBGWMB2RGA/Mailing List

Published

Feb 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2728Information exposure vulnerability in the CIGESv2 system. Th…5.5
• CVE-2024-27280A buffer-overread issue was discovered in StringIO 3.0.1, as…9.8
• CVE-2024-27281An issue was discovered in RDoc 6.3.3 through 6.6.2, as dist…4.5
• CVE-2024-27282An issue was discovered in Ruby 3.x through 3.3.0. If attack…6.6
• CVE-2024-27283A vulnerability was discovered in Veritas eDiscovery Platfor…7.2
• CVE-2024-27284cassandra-rs is a Cassandra (CQL) driver for Rust. Code that…7.5
• CVE-2024-27286Zulip is an open-source team collaboration tool. When a user…6.5
• CVE-2024-27287ESPHome is a system to control your ESP8266/ESP32 for Home A…8.7
• CVE-2024-272881Panel is an open source Linux server operation and maintena…3.1
• CVE-2024-27289pgx is a PostgreSQL driver and toolkit for Go. Prior to vers…8.1
• CVE-2024-2729The Otter Blocks WordPress plugin before 2.6.6 does not pro…6.1
• CVE-2024-27290Docassemble is an expert system for guided interviews and do…6.1