Red Hat Security AdvisoryRHSA-2013:0699
ruby193-rubygem-activerecord security update
Released 2013-04-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat OpenShift Enterprise Infrastructure ruby193-rubygem-activerecord-1:3.2.8-6.el6, ruby193-rubygem-activerecord-doc-1:3.2.8-6.el6
- Red Hat OpenShift Enterprise Node ruby193-rubygem-activerecord-1:3.2.8-6.el6, ruby193-rubygem-activerecord-doc-1:3.2.8-6.el6
Fixes 1 record
Priority LOW 29
The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03504 · Published 2013-03-19 · Partial fix · 2.3.18, 3.1.12 +1 CWE-20
