Contents

---
url: http://osvdb.org/show/osvdb/89026
title: |
  Ruby on Rails params_parser.rb Action Pack Type Casting Parameter Parsing
  Remote Code Execution 

description: |
  Ruby on Rails contains a flaw in params_parser.rb of the Action Pack.
  The issue is triggered when a type casting error occurs during the parsing
  of parameters. This may allow a remote attacker to potentially execute
  arbitrary code.

cvss_v2: 10.0

patched_versions:
  - ~> 2.3.15
  - ~> 3.0.19
  - ~> 3.1.10
  - ">= 3.2.11"

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
bundler-audit-0.1.1	data/bundler/audit/rails/2013-0156.yml
bundler-audit-0.1.0	data/bundler/audit/rails/2013-0156.yml