EUVD-2013-3159

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Active Record in Ruby on Rails allows data-type injection attacks via comparison issues in older versions

Reporter	Title	Published	Views	Family All 16
CVE	CVE-2013-3221	22 Apr 201301:00	–	cve
Cvelist	CVE-2013-3221	22 Apr 201301:00	–	cvelist
Debian CVE	CVE-2013-3221	22 Apr 201301:00	–	debiancve
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Console	25 Sep 202516:50	–	ibm
Github Security Blog	Active Record component in Ruby on Rails has a data-type injection vulnerability	14 May 202200:54	–	github
GitLab Advisory Database	Active Record component in Ruby on Rails has a data-type injection vulnerability	14 May 202200:00	–	gitlab
NVD	CVE-2013-3221	22 Apr 201303:27	–	nvd
OpenVAS	Ruby on Rails Query Manipulation Vulnerability (Feb 2013)	25 Jul 201900:00	–	openvas
OSV	DEBIAN-CVE-2013-3221	22 Apr 201303:27	–	osv
OSV	GHSA-F57C-HX33-HVH8 Active Record component in Ruby on Rails has a data-type injection vulnerability	14 May 202200:54	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "8a1c6e68-ddda-388f-8d0f-3c5f15509858",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2329a1f6-a7c0-35ff-9016-ae84cb84ac68",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2013-3221.html
pl	www.pl.reddit.com/r/netsec/comments/17yajp/mysql_madness_and_rails/
groups	www.groups.google.com/group/rubyonrails-security/msg/1f3bc0b88a60c1ce
phenoelit	www.phenoelit.org/blog/archives/2013/02/index.html
openwall	www.openwall.com/lists/oss-security/2013/04/24/7
gist	www.gist.github.com/dakull/5442275
openwall	www.openwall.com/lists/oss-security/2013/02/06/7
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.4High risk

Vulners AI Score7.4

CVSS 26.4

EPSS0.00483