Lucene search
K

rubygem-activerecord: Strong Parameter bypass with create_with

🗓️ 27 Aug 2014 14:22:03Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 2 Views

Active Record create_with bypasses strong parameters, allowing mass assignment with untrusted values.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
CVE
CVE-2014-3514
20 Aug 201410:00
cve
Cvelist
CVE-2014-3514
20 Aug 201410:00
cvelist
Debian CVE
CVE-2014-3514
20 Aug 201410:00
debiancve
EUVD
EUVD-2017-0209
7 Oct 202500:30
euvd
Fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-5.fc20
26 Sep 201409:01
fedora
Tenable Nessus
Fedora 20 : rubygem-activerecord-4.0.0-5.fc20 (2014-9706)
29 Sep 201400:00
nessus
Github Security Blog
Active Record subject to strong parameters protection bypass
24 Oct 201718:33
github
Github Security Blog
High severity vulnerability that affects activerecord
21 Aug 201819:03
github
GitLab Advisory Database
Strong Parameter bypass with create_with
20 Aug 201400:00
gitlab
NVD
CVE-2014-3514
20 Aug 201411:17
nvd
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux6anyror40-rubygem-activerecord1:4.0.2-2.3.el6.noarchror40-rubygem-activerecord-1:4.0.2-2.3.el6.noarch.noarch.rpm
Red Hat Enterprise Linux7anyror40-rubygem-activerecord1:4.0.2-2.3.el7.noarchror40-rubygem-activerecord-1:4.0.2-2.3.el7.noarch.noarch.rpm
Red Hat Enterprise Linux6anyror40-rubygem-activerecord-doc1:4.0.2-2.3.el6.noarchror40-rubygem-activerecord-doc-1:4.0.2-2.3.el6.noarch.noarch.rpm
Red Hat Enterprise Linux7anyror40-rubygem-activerecord-doc1:4.0.2-2.3.el7.noarchror40-rubygem-activerecord-doc-1:4.0.2-2.3.el7.noarch.noarch.rpm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 Jun 2026 12:23Current
5.9Medium risk
Vulners AI Score5.9
CVSS 27.5
EPSS0.02797
2