Red Hat Security AdvisoryRHSA-2013:0153
Ruby on Rails security update
Released 2013-01-10 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Enterprise Infrastructure ruby193-rubygem-actionpack-1:3.2.8-2.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-2.el6, ruby193-rubygem-activesupport-1:3.2.8-3.el6 +2
- Red Hat OpenShift Enterprise Node ruby193-rubygem-actionpack-1:3.2.8-2.el6, ruby193-rubygem-actionpack-doc-1:3.2.8-2.el6, ruby193-rubygem-activesupport-1:3.2.8-3.el6 +1
Fixes 1 record
Priority HIGH 78
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attacke…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.98979 · Published 2013-01-13 · Fixed in 2.3.15, 3.0.19 +2 CWE-20
