CVE-2012-2661

CVE-2012-2661 concerns Ruby on Rails ActiveRecord where passing request data to a where call can enable SQL injection via nested query parameters. Affected ranges are Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4. The issue is related to the handling of nested query hashes...

CVE-2012-2695

The CVE-2012-2695 entry affects Ruby on Rails Active Record prior to versions 3.0.14, 3.1.x prior to 3.1.6, and 3.2.x prior to 3.2.6. The issue arises from how request data is passed to where() calls in ActiveRecord, enabling SQL injection via nested query parameters due to improper handling of n...

CVE-2012-2660

CVE-2012-2660 (Ruby on Rails) is a remote bypass vulnerability where actionpack/ActiveRecord fails to align parameter handling between ActiveRecord and Rack interfaces: Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 allow bypass of database-query restrictions and NULL check...

CVE-2012-2694

CVE-2012-2694 is a Ruby on Rails Active Record/parameter handling weakness where Rails versions 3.0.x before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 fail to align Active Record and Rack parameter handling, enabling remote attackers to bypass query restrictions and perform NULL checks v...

CVE-2012-3464

CVE-2012-3464 is a cross-site scripting (XSS) vulnerability in Rails where activesupport/lib/active_support/core_ext/string/output_safety.rb permits remote injection via a single quote character. Affected Rails versions are 3.0.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8. The impa...

CVE-2012-3465

CVE-2012-3465 affects Ruby on Rails (Action Pack) via action_view/sanitize_helper.rb strip_tags. Vulnerable in Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8; malformed HTML markup can allow remote XSS via the strip_tags path. The issue is an XSS in the Rails sanitization flow an...

CVE-2012-1099

Concretely, CVE-2012-1099 affects Ruby on Rails ActionPack’s select helper in action_view/form_options_helper.rb. The vulnerability allows remote XSS via certain OPTION element generation in , impacting Rails 3.0.x (<3.0.12), 3.1.x (<3.1.4), and 3.2.x (

CVE-2012-3424

The vulnerability CVE-2012-3424 affects Ruby on Rails Action Pack HTTP Digest authentication. The decode_credentials path in action_controller/metal/http_authentication.rb converts Digest strings to Ruby symbols, enabling a remote attacker who can access an app using with_http_digest/authenticate...

CVE-2012-3463

CVE-2012-3463 is a Cross-site Scripting (XSS) vulnerability in Ruby on Rails’ ActionView form helper. The flaw resides in actionpack/lib/action_view/helpers/form_tag_helper.rb, allowing remote attackers to inject arbitrary Web script or HTML via the prompt field to the select_tag helper. Affected...

CVE-2012-1098

Ruby on Rails 3.0.x (pre-3.0.12), 3.1.x (pre-3.1.4), and 3.2.x (pre-3.2.2) are vulnerable to a cross-site scripting (XSS) weakness in SafeBuffer handling. The vulnerability allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object manipulated through...