Contents

---
gem: auto_awesomplete
osvdb: 132800
url: https://github.com/Tab10id/auto_awesomplete/issues/2
title: |
  auto_awesomplete Gem for Ruby allows arbitrary search execution
date: 2016-01-08
description: |
  auto_awesomplete Gem for Ruby contains a flaw that is triggered when handling the
  'params[:default_class_name]' option. This allows users to search any object
  of all given ActiveRecord classes.

Version data entries

6 entries across 6 versions & 2 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/auto_awesomplete/OSVDB-132800.yml
bundler-budit-0.6.2	data/ruby-advisory-db/gems/auto_awesomplete/OSVDB-132800.yml
bundler-budit-0.6.1	data/ruby-advisory-db/gems/auto_awesomplete/OSVDB-132800.yml
bundler-audit-0.6.1	data/ruby-advisory-db/gems/auto_awesomplete/OSVDB-132800.yml
bundler-audit-0.6.0	data/ruby-advisory-db/gems/auto_awesomplete/OSVDB-132800.yml
bundler-audit-0.5.0	data/ruby-advisory-db/gems/auto_awesomplete/OSVDB-132800.yml