Sha256: 72049abf21d6c3ce21dbb5f281bbf961c5c9eeb93e22f7bce327106b18561343
Contents?: true
Size: 653 Bytes
Versions: 5
Compression:
Stored size: 653 Bytes
Contents
--- gem: activerecord framework: rails cve: 2014-3482 osvdb: 108664 url: http://osvdb.org/show/osvdb/108664 title: SQL Injection Vulnerability in Active Record date: 2014-07-02 description: | Ruby on Rails contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the PostgreSQL adapter for Active Record not properly sanitizing user-supplied input when quoting bitstring. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data. cvss_v2: unaffected_versions: - ">= 4.0.0" patched_versions: - ~> 3.2.19
Version data entries
5 entries across 5 versions & 2 rubygems