SQL Injection

Overview updatebycase is an a package that allows you to update multiple ActiveRecord records based on case values on a single database hit Affected versions of this package are vulnerable to SQL Injection in the UpdateByCase and Utils classes, which accept and process SQL strings without...

PT-2022-23056 · Unknown · Update By Case

Name of the Vulnerable Software and Affected Versions: update by case gem versions prior to 0.1.3 Description: The issue concerns a SQL injection vulnerability due to the use of custom, unsanitized SQL strings in the update by case gem. This vulnerability allows for potential SQL injection attack...