Lucene search

K

PRIOn knowledge basePRION:CVE-2014-3483

HistoryJul 07, 2014 - 11:01 a.m.

Sql injection

2014-07-0711:01:00

PRIOn knowledge base

www.prio-n.com

9

8.9 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.6%

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.

CPENameOperatorVersion
railseq4.0.0
railseq4.0.1
railseq4.0.2
railseq4.0.6 rc3
railseq4.1.0 beta1
railseq4.1.2 rc1
railseq4.1.2 rc2
railseq4.1.2
railseq4.1.2 rc3
railseq4.1.1

Rows per page:

1-10 of 241

References

openwall.com/lists/oss-security/2014/07/02/5

rhn.redhat.com/errata/RHSA-2014-0877.html

secunia.com/advisories/59971

secunia.com/advisories/60214

www.debian.org/security/2014/dsa-2982

www.securityfocus.com/bid/68341

groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J

8.9 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.6%

Related for PRION:CVE-2014-3483

osv1 redhat1 nessus3 github1 debiancve1 ubuntucve1 gitlab1 veracode1 cve1 nvd1 cvelist1 hackerone1 rubygems1 fedora2 openvas5 securityvulns2 debian1 mageia1