Lucene search
+L

1 matches found

RubySec
RubySec
added 2014/07/02 12:00 a.m.49 views

CVE-2014-3482 rubygem-activerecord: SQL injection vulnerability in 'bitstring' quoting

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresqladapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper bitstring quoting. It was...

7.5CVSS8.2AI score0.04278EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder