Lucene search
Ubuntu.comUB:CVE-2014-0080HistoryFeb 20, 2014 - 12:00 a.m.
CVE-2014-0080
2014-02-2000:00:00
ubuntu.com
ubuntu.com
14
0.004 Low
EPSS
Percentile
73.8%
SQL injection vulnerability in
activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in
Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when
PostgreSQL is used, allows remote attackers to execute “add data” SQL
commands via vectors involving \ (backslash) characters that are not
properly handled in operations on array columns.
Notes
| Author | Note |
|---|---|
| mdeslaur | in Oneiric+, rails package is just for transition |
References
Related
github
github
Array data injection vulnerability in activerecord
2017-10-24 18:33:36
cvelist
cvelist
CVE-2014-0080
2014-02-20 11:00:00
osv
osv
Array data injection vulnerability in activerecord
2017-10-24 18:33:36
gitlab
gitlab
prion
prion
Sql injection
2014-02-20 15:27:00
debiancve
debiancve
CVE-2014-0080
2014-02-20 15:27:00
cve
cve
CVE-2014-0080
2014-02-20 15:27:00
rubygems
rubygems
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-4.fc20
2014-08-23 02:01:38
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-2.fc20
2014-03-11 04:00:14
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-5.fc20
2014-09-26 09:01:18
openvas
openvas
Fedora Update for rubygem-activerecord FEDORA-2014-8065
2014-08-23 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2014-3169
2014-03-12 00:00:00
Fedora Update for rubygem-activerecord FEDORA-2014-3169
2014-03-12 00:00:00
nessus
nessus
mageia
mageia
Updated ruby-rails and associated packages fix multiple vulnerabilities
2014-04-24 23:02:23