Lucene search

K

Update By Case Project Security Vulnerabilities

cve
cve

CVE-2022-35956

This Rails gem adds two methods to the ActiveRecord::Base class that allow you to update many records on a single database hit, using a case sql statement for it. Before version 0.1.3 update_by_case gem used custom sql strings, and it was not sanitized, making it vulnerable to sql injection. Upgrad...

9.8CVSS

9.6AI Score

0.002EPSS

2022-08-12 09:15 PM
46
2