Lucene search

RubySecRUBY:ACTIVERECORD-2011-0448

HistoryOct 23, 2017 - 9:00 p.m.

Potential SQL Injection with limit in rails/activerecord

2017-10-2321:00:00

RubySec

rubysec.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to
the limit function specify integer values, which makes it easier
for remote attackers to conduct SQL injection attacks via a
non-numeric argument.

Affected configurations

Vulners

Node

rubyactiverecordRange2.3.10–2.4.0

rubyactiverecordRange3.0.4>

VendorProductVersionCPE
rubyactiverecord*cpe:2.3:a:ruby:activerecord:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ruby	activerecord	*	cpe:2.3:a:ruby:activerecord::::::::

References

weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for RUBY:ACTIVERECORD-2011-0448