CVE-2014-3483 in Ruby on Rails
Sumário (Inglês)
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.
Reservar
14/05/2014
Divulgação
07/07/2014
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 66979 | Ruby on Rails range Query quoting.rb Injeção SQL | 89 | Alto | Correção oficial | CVE-2014-3483 |