Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-A3498CEEF02311DE6410ECF58BAB69DFHistoryAug 20, 2014 - 12:00 a.m.
Strong Parameter bypass with create_with
2014-08-2000:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
8
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.9%
The create_with functionality in Active Record was implemented incorrectly and completely bypasses the strong parameter protection.
Affected configurations
Node
gemactiverecordRange4.0.0>
ORgemactiverecordRange<4.0.9
ORgemactiverecordRange4.1.0>
ORgemactiverecordRange<4.1.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| gem/activerecord | gt | 4.0.0 | |
| gem/activerecord | lt | 4.0.9 | |
| gem/activerecord | gt | 4.1.0 | |
| gem/activerecord | lt | 4.1.5 |
Related
prion
prion
Design/Logic Flaw
2014-08-20 11:17:00
redhat
redhat
(RHSA-2014:1102) Important: ror40-rubygem-activerecord security update
2014-08-27 00:00:00
nvd
nvd
CVE-2014-3514
2014-08-20 11:17:14
nessus
nessus
Fedora 20 : rubygem-activerecord-4.0.0-5.fc20 (2014-9706)
2014-09-29 00:00:00
cve
cve
CVE-2014-3514
2014-08-20 11:17:14
veracode
veracode
SQL Injection In Query_methods
2019-01-15 08:59:51
github
github
Active Record subject to strong parameters protection bypass
2017-10-24 18:33:36
debiancve
debiancve
CVE-2014-3514
2014-08-20 11:17:14
osv
osv
Active Record subject to strong parameters protection bypass
2017-10-24 18:33:36
cvelist
cvelist
CVE-2014-3514
2014-08-20 10:00:00
ubuntucve
ubuntucve
CVE-2014-3514
2014-08-20 00:00:00
openvas
openvas
Fedora Update for rubygem-activerecord FEDORA-2014-9706
2014-10-01 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-5.fc20
2014-09-26 09:01:18
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.9%
Related for GITLAB-A3498CEEF02311DE6410ECF58BAB69DF