5 matches found
SUSE CVE-2010-3933
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs...
6.4CVSS7.1AI score0.0225EPSS
SaveExploits0References4
CVE-2010-3933
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs...
6.4CVSS6AI score0.0225EPSS
SaveExploits0References2
CVE-2010-3933
CVE-2010-3933 affects Ruby on Rails 2.3.9 and 3.0.0, where nested attributes are not handled securely. The root cause is improper handling of nested attributes, enabling a remote attacker to modify arbitrary records by altering parameter names for form inputs. Reports in connected sources corrobo...
6.4CVSS6.6AI score0.0225EPSS
SaveExploits0References4Affected Software1
20