CVE-2014-3483 in Ruby on Rails
Zusammenfassung (Englisch)
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.
Reservieren
14.05.2014
Veröffentlichung
07.07.2014
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 66979 | Ruby on Rails range Query quoting.rb SQL Injection | 89 | High | Offizieller Fix | CVE-2014-3483 |