Lucene search
+L

CVE-2014-3514

🗓️ 20 Aug 2014 10:00:00Reported by redhatType 
cve
 cve
🔗 web.nvd.nist.gov👁 124 Views

Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes create_with calls

Related
Detection
Refs
ReporterTitlePublishedViews
Family
cvelist
Cvelist
CVE-2014-3514
20 Aug 201410:00
–cvelist
debiancve
Debian CVE
CVE-2014-3514
20 Aug 201410:00
–debiancve
euvd
EUVD
EUVD-2017-0209
7 Oct 202500:30
–euvd
fedora
Fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-5.fc20
26 Sep 201409:01
–fedora
nessus
Tenable Nessus
Fedora 20 : rubygem-activerecord-4.0.0-5.fc20 (2014-9706)
29 Sep 201400:00
–nessus
github
Github Security Blog
Active Record subject to strong parameters protection bypass
24 Oct 201718:33
–github
github
Github Security Blog
High severity vulnerability that affects activerecord
21 Aug 201819:03
–github
gitlab
GitLab Advisory Database
Strong Parameter bypass with create_with
20 Aug 201400:00
–gitlab
mend
Mend
CVE-2014-3514
20 Aug 201410:00
–mend
nvd
NVD
CVE-2014-3514
20 Aug 201411:17
–nvd
Rows per page
NVD
Node
OR
rubyonrailsrailsMatch4.0.0-
rubyonrailsrailsMatch4.0.0beta
rubyonrailsrailsMatch4.0.0rc1
rubyonrailsrailsMatch4.0.0rc2
rubyonrailsrailsMatch4.0.1-
rubyonrailsrailsMatch4.0.1rc1
rubyonrailsrailsMatch4.0.1rc2
rubyonrailsrailsMatch4.0.1rc3
rubyonrailsrailsMatch4.0.1rc4
rubyonrailsrailsMatch4.0.6rc1
rubyonrailsrailsMatch4.0.6rc2
rubyonrailsrailsMatch4.0.6rc3
rubyonrailsrailsMatch4.1.0-
rubyonrailsrailsMatch4.1.0beta1
rubyonrailsrailsMatch4.1.2rc1
rubyonrailsrailsMatch4.1.2rc2
rubyonrailsrailsMatch4.1.2rc3

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation