Lucene search
K

CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection

🗓️ 12 Feb 2013 00:00:00Reported by RubySecType 
rubygems
 rubygems
🔗 rubysec.com👁 38 Views

CVE-2013-0269 rubygem-json: Denial of Service and SQL Injection. JSON gem versions 1.5.5, 1.6.x, and 1.7.x for Ruby allow remote attackers to cause DoS or bypass mass assignment protection mechanism via crafted JSON document triggering creation of arbitrary Ruby symbols or internal objects, leading to SQL injection

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Amazon
Medium: ruby20
12 Aug 202000:00
amazon
Amazon
Important: ruby24
31 Aug 202000:00
amazon
Amazon
Medium: rubygem-json
31 Aug 202000:00
amazon
Amazon
Medium: ruby19, ruby21
31 Aug 202000:00
amazon
Amazon
Medium: ruby
24 May 202100:00
amazon
Amazon
Important: ruby
25 Sep 202300:00
amazon
FreeBSD
Ruby -- Denial of Service and Unsafe Object Creation Vulnerability in JSON
11 Feb 201300:00
freebsd
CVE
CVE-2013-0269
13 Feb 201301:00
cve
Cvelist
CVE-2013-0269
13 Feb 201301:00
cvelist
Debian
[SECURITY] [DLA 215-1] libjson-ruby security update
30 Apr 201516:34
debian
Rows per page
Vulners
Node
rubyruby_3.2_jsonRange1.5.01.5.5
OR
rubyruby_3.2_jsonRange1.6.01.6.8
OR
rubyruby_3.2_jsonRange1.7.7

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation