mysql-bunuuid-rails vulnerable to SQL injection

🗓️ 30 Oct 2018 20:06:34Reported by GitHub Advisory DatabaseType

mysql-binuuid-rails 1.1.0 SQL injection vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
OSV	mysql-bunuuid-rails vulnerable to SQL injection	30 Oct 201820:34	–	osv
OSV	CVE-2018-18476	24 Oct 201821:29	–	osv
Prion	Sql injection	24 Oct 201821:29	–	prion
CVE	CVE-2018-18476	24 Oct 201821:29	–	cve
Veracode	SQL Injection	25 Oct 201800:58	–	veracode
NVD	CVE-2018-18476	24 Oct 201821:29	–	nvd
Cvelist	CVE-2018-18476	24 Oct 201821:00	–	cvelist
RubySec	mysql-binuuid-rails allows SQL Injection by removing default string escaping	18 Oct 201821:00	–	rubygems

Vulners

Node

nedap mysql-binuuid-railsRange<1.1.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-18476
github	www.github.com/nedap/mysql-binuuid-rails/pull/18
gist	www.gist.github.com/viraptor/881276ea61e8d56bac6e28454c79f1e6
github	www.github.com/nedap/mysql-binuuid-rails/commit/9ae920951b46ff0163b16c55d744e89acb1036d4
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/mysql-binuuid-rails/CVE-2018-18476.yml
github	www.github.com/advisories/GHSA-6j63-35hj-vmcg

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Oct 2018 20:34Current

9.8High risk

Vulners AI Score9.8

CVSS27.5

CVSS39.8

EPSS0.00307

CWE-89