Ruby on Rails Active Record 数据类型注入漏洞(CVE-2013-3221)

Follow 0

Basic Fields

SSV ID:: SSV-60765

Find Time:: Unknown

Submit Time:: 2013-04-24

Level:

Category:: SQL 注入

Component:: Ruby on Rails
(2.3,3.0,3.1,3.2)

Author:: Unknown

Submitter:: Knownsec

CVE-ID：: CVE-2013-3221

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Detail

Contributor Knownsec Got 0KB

have 1 exchange

PoC

Unavailable PoC

Reference Linking

https://groups.google.com/group/rubyonrails-security/msg/1f3bc0b88a60c1ce?dmode=source&amp;amp;output=gplain

Solutions

Temp Solutions

Official Solution

Defense Solutions

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes