CVE-2016-0753 in Ruby on Rails
Summary
Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
12/16/2015
Disclosure
02/15/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 80683 | Ruby on Rails Active Model input validation | 20 | Unproven | Official fix | CVE-2016-0753 |