Описание
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | not-affected | |
| devel | not-affected | |
| hardy | not-affected | |
| karmic | not-affected | |
| lucid | not-affected | |
| maverick | not-affected | |
| upstream | released | 3.0.1, 2.3.10 |
Показывать по
10
EPSS
Процентиль: 72%
0.00712
Низкий
6.4 Medium
CVSS2
Связанные уязвимости
nvd
больше 15 лет назад
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.
debian
больше 15 лет назад
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attribut ...
github
больше 8 лет назад
Rails activerecord gem has Improper Input Validation vulnerability
EPSS
Процентиль: 72%
0.00712
Низкий
6.4 Medium
CVSS2