CVE-2014-3514 in Ruby on Rails
요약 (영어)
activerecord/lib/active_record/relation/query_methods.rb in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes create_with calls.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2014. 05. 14.
공개
2014. 08. 20.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 67377 | Ruby on Rails ActiveRecord create_with 권한 상승 | 264 | 입증되지 않음 | 공식 수정 | CVE-2014-3514 |