CVE-2013-0277 in Ruby on Rails
Summary
ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
12/06/2012
Disclosure
02/12/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7682 | Ruby on Rails Serialize Helper privileges management | 269 | Not defined | Official fix | CVE-2013-0277 |