CVE-2014-3514

Опубликовано: 20 авг. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

activerecord/lib/active_record/relation/query_methods.rb in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes create_with calls.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:rubyonrails:rails:4.0.0:-:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.0:beta:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.0:rc2:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.1:-:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.1:rc1:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.1:rc2:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.1:rc3:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.1:rc4:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.6:rc1:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.6:rc2:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.6:rc3:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.0.8:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.0:-:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.0:beta1:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.1:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.2:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.2:rc1:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.2:rc2:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.2:rc3:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:rubyonrails:rails:4.1.4:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00331

Низкий

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2014-3514

ubuntu

больше 11 лет назад

CVE-2014-3514

redhat

больше 11 лет назад

CVE-2014-3514

debian

больше 11 лет назад

activerecord/lib/active_record/relation/query_methods.rb in Active Rec ...

GHSA-9rf5-jm6f-2fmm

github

больше 8 лет назад

Active Record subject to strong parameters protection bypass

EPSS

Процентиль: 55%

0.00331

Низкий

7.5 High

CVSS2

Дефекты

CWE-264