Lucene search

Active Record contains deserialization of arbitrary YAML

🗓️ 24 Oct 2017 18:37:33Reported by GitHub Advisory DatabaseType

Active Record YAML deserialization vulnerability in Ruby on Rail

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 33
Cvelist	CVE-2013-0277	13 Feb 201301:00	–	cvelist
RubySec	CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability with Rails 2.3 and 3.0	10 Feb 201320:00	–	rubygems
NVD	CVE-2013-0277	13 Feb 201301:55	–	nvd
seebug.org	Ruby on Rails 远程代码执行漏洞(CVE-2013-0277)	7 Mar 201300:00	–	seebug
CVE	CVE-2013-0277	13 Feb 201301:55	–	cve
UbuntuCve	CVE-2013-0277	13 Feb 201300:00	–	ubuntucve
Debian CVE	CVE-2013-0277	13 Feb 201301:55	–	debiancve
OSV	CVE-2013-0277	13 Feb 201301:55	–	osv
OSV	GHSA-FHJ9-CJJH-27VM Active Record contains deserialization of arbitrary YAML	24 Oct 201718:33	–	osv
OSV	DSA-2620-1 rails - several	12 Feb 201300:00	–	osv

Vulners

Node

activerecord_project activerecordRange3.0.0–3.1.0

activerecord_project activerecordRange<2.3.17

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-0277
groups	www.groups.google.com/group/rubyonrails-security/msg/302ec7ce90f13837
lists	www.lists.apple.com/archives/security-announce/2013/Jun/msg00000.html
lists	www.lists.opensuse.org/opensuse-updates/2013-03/msg00048.html
support	www.support.apple.com/kb/HT5784
weblog	www.weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/
debian	www.debian.org/security/2013/dsa-2620
openwall	www.openwall.com/lists/oss-security/2013/02/11/6
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2013-0277.yml
puppet	www.puppet.com/security/cve/cve-2013-0277

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2017 18:33Current

8.2High risk

Vulners AI Score8.2

CVSS210

EPSS0.07162

CWE-502