Lucene search
GoogleOSV:GHSA-R8FH-HQ2P-7QHQHistoryOct 24, 2017 - 6:33 p.m.
Active Record contains SQL Injection via improper range quoting
2017-10-2418:33:36
Google
osv.dev
14
EPSS
0.009
Percentile
82.6%
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.
References
openwall.com/lists/oss-security/2014/07/02/5
rhn.redhat.com/errata/RHSA-2014-0877.html
www.debian.org/security/2014/dsa-2982
github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2014-3483.yml
groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J
nvd.nist.gov/vuln/detail/CVE-2014-3483
web.archive.org/web/20200228150648/www.securityfocus.com/bid/68341
Related
veracode
veracode
SQL Command Injection By Leveraging Improper Range Quoting
2019-01-15 08:56:06
cve
cve
CVE-2014-3483
2014-07-07 11:01:30
nvd
nvd
CVE-2014-3483
2014-07-07 11:01:30
nessus
nessus
RHEL 6 / 7 : ror40-rubygem-activerecord (RHSA-2014:0877)
2024-04-27 00:00:00
Fedora 20 : rubygem-activerecord-4.0.0-4.fc20 (2014-8065)
2014-08-23 00:00:00
Debian DSA-2982-1 : ruby-activerecord-3.2 - security update
2014-07-21 00:00:00
debiancve
debiancve
CVE-2014-3483
2014-07-07 11:01:30
github
github
Active Record contains SQL Injection via improper range quoting
2017-10-24 18:33:36
redhat
redhat
(RHSA-2014:0877) Moderate: ror40-rubygem-activerecord security update
2014-07-14 00:00:00
prion
prion
Sql injection
2014-07-07 11:01:00
rubygems
rubygems
hackerone
hackerone
cvelist
cvelist
CVE-2014-3483
2014-07-07 10:00:00
ubuntucve
ubuntucve
CVE-2014-3483
2014-07-07 00:00:00
gitlab
gitlab
SQL Injection Vulnerabilities Affecting PostgreSQL
2014-07-07 00:00:00
mageia
mageia
Updated ruby-actionpack packages fix security issues
2014-07-26 17:09:43
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0303)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-2982-1)
2014-07-18 00:00:00
debian
debian
[SECURITY] [DSA 2982-1] ruby-activerecord-3.2 security update
2014-07-19 10:09:34
fedora
fedora
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-4.fc20
2014-08-23 02:01:38
[SECURITY] Fedora 20 Update: rubygem-activerecord-4.0.0-5.fc20
2014-09-26 09:01:18
securityvulns
securityvulns
[SECURITY] [DSA 2982-1] ruby-activerecord-3.2 security update
2014-10-16 00:00:00