6.4

CVE-2013-6417

actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request that leverages (1) third-party Rack middleware or (2) custom Rack middleware.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-0155.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rubyonrails ≫ Rails Version3.0.0
Rubyonrails ≫ Rails Version3.0.0 Updatebeta
Rubyonrails ≫ Rails Version3.0.0 Updatebeta2
Rubyonrails ≫ Rails Version3.0.0 Updatebeta3
Rubyonrails ≫ Rails Version3.0.0 Updatebeta4
Rubyonrails ≫ Rails Version3.0.0 Updaterc
Rubyonrails ≫ Rails Version3.0.0 Updaterc2
Rubyonrails ≫ Rails Version3.0.1
Rubyonrails ≫ Rails Version3.0.1 Updatepre
Rubyonrails ≫ Rails Version3.0.2
Rubyonrails ≫ Rails Version3.0.2 Updatepre
Rubyonrails ≫ Rails Version3.0.3
Rubyonrails ≫ Rails Version3.0.4 Updaterc1
Rubyonrails ≫ Rails Version3.0.5
Rubyonrails ≫ Rails Version3.0.5 Updaterc1
Rubyonrails ≫ Rails Version3.0.6
Rubyonrails ≫ Rails Version3.0.6 Updaterc1
Rubyonrails ≫ Rails Version3.0.6 Updaterc2
Rubyonrails ≫ Rails Version3.0.7
Rubyonrails ≫ Rails Version3.0.7 Updaterc1
Rubyonrails ≫ Rails Version3.0.7 Updaterc2
Rubyonrails ≫ Rails Version3.0.8
Rubyonrails ≫ Rails Version3.0.8 Updaterc1
Rubyonrails ≫ Rails Version3.0.8 Updaterc2
Rubyonrails ≫ Rails Version3.0.8 Updaterc3
Rubyonrails ≫ Rails Version3.0.8 Updaterc4
Rubyonrails ≫ Rails Version3.0.9
Rubyonrails ≫ Rails Version3.0.9 Updaterc1
Rubyonrails ≫ Rails Version3.0.9 Updaterc2
Rubyonrails ≫ Rails Version3.0.9 Updaterc3
Rubyonrails ≫ Rails Version3.0.9 Updaterc4
Rubyonrails ≫ Rails Version3.0.9 Updaterc5
Rubyonrails ≫ Rails Version3.0.10
Rubyonrails ≫ Rails Version3.0.10 Updaterc1
Rubyonrails ≫ Rails Version3.0.11
Rubyonrails ≫ Rails Version3.0.12
Rubyonrails ≫ Rails Version3.0.12 Updaterc1
Rubyonrails ≫ Rails Version3.0.13
Rubyonrails ≫ Rails Version3.0.13 Updaterc1
Rubyonrails ≫ Rails Version3.0.14
Rubyonrails ≫ Rails Version3.0.16
Rubyonrails ≫ Rails Version3.0.17
Rubyonrails ≫ Rails Version3.0.18
Rubyonrails ≫ Rails Version3.0.19
Rubyonrails ≫ Rails Version3.0.20
Rubyonrails ≫ Rails Version3.1.0
Rubyonrails ≫ Rails Version3.1.0 Updatebeta1
Rubyonrails ≫ Rails Version3.1.0 Updaterc1
Rubyonrails ≫ Rails Version3.1.0 Updaterc2
Rubyonrails ≫ Rails Version3.1.0 Updaterc3
Rubyonrails ≫ Rails Version3.1.0 Updaterc4
Rubyonrails ≫ Rails Version3.1.0 Updaterc5
Rubyonrails ≫ Rails Version3.1.0 Updaterc6
Rubyonrails ≫ Rails Version3.1.0 Updaterc7
Rubyonrails ≫ Rails Version3.1.0 Updaterc8
Rubyonrails ≫ Rails Version3.1.1
Rubyonrails ≫ Rails Version3.1.1 Updaterc1
Rubyonrails ≫ Rails Version3.1.1 Updaterc2
Rubyonrails ≫ Rails Version3.1.1 Updaterc3
Rubyonrails ≫ Rails Version3.1.2
Rubyonrails ≫ Rails Version3.1.2 Updaterc1
Rubyonrails ≫ Rails Version3.1.2 Updaterc2
Rubyonrails ≫ Rails Version3.1.3
Rubyonrails ≫ Rails Version3.1.4
Rubyonrails ≫ Rails Version3.1.4 Updaterc1
Rubyonrails ≫ Rails Version3.1.5
Rubyonrails ≫ Rails Version3.1.5 Updaterc1
Rubyonrails ≫ Rails Version3.1.6
Rubyonrails ≫ Rails Version3.1.7
Rubyonrails ≫ Rails Version3.1.8
Rubyonrails ≫ Rails Version3.1.9
Rubyonrails ≫ Rails Version3.1.10
Rubyonrails ≫ Rails Version3.2.0
Rubyonrails ≫ Rails Version3.2.0 Updaterc1
Rubyonrails ≫ Rails Version3.2.0 Updaterc2
Rubyonrails ≫ Rails Version3.2.1
Rubyonrails ≫ Rails Version3.2.2
Rubyonrails ≫ Rails Version3.2.2 Updaterc1
Rubyonrails ≫ Rails Version3.2.3
Rubyonrails ≫ Rails Version3.2.3 Updaterc1
Rubyonrails ≫ Rails Version3.2.3 Updaterc2
Rubyonrails ≫ Rails Version3.2.4
Rubyonrails ≫ Rails Version3.2.4 Updaterc1
Rubyonrails ≫ Rails Version3.2.5
Rubyonrails ≫ Rails Version3.2.6
Rubyonrails ≫ Rails Version3.2.7
Rubyonrails ≫ Rails Version3.2.8
Rubyonrails ≫ Rails Version3.2.9
Rubyonrails ≫ Rails Version3.2.10
Rubyonrails ≫ Rails Version3.2.11
Rubyonrails ≫ Rails Version3.2.12
Rubyonrails ≫ Rails Version3.2.13
Rubyonrails ≫ Rails Version3.2.13 Updaterc1
Rubyonrails ≫ Rails Version3.2.13 Updaterc2
Rubyonrails ≫ Ruby On Rails Version <= 3.2.15
Rubyonrails ≫ Ruby On Rails Version3.0.4
Rubyonrails ≫ Ruby On Rails Version3.1.11
Rubyonrails ≫ Ruby On Rails Version3.2.14
Rubyonrails ≫ Ruby On Rails Version3.2.14 Updaterc1
Rubyonrails ≫ Ruby On Rails Version3.2.14 Updaterc2
Rubyonrails ≫ Ruby On Rails Version3.2.15 Updaterc1
Rubyonrails ≫ Ruby On Rails Version3.2.15 Updaterc2
Rubyonrails ≫ Rails Update- Version <= 4.0.1
Rubyonrails ≫ Rails Version4.0.0 Update-
Rubyonrails ≫ Rails Version4.0.0 Updatebeta
Rubyonrails ≫ Rails Version4.0.0 Updaterc1
Rubyonrails ≫ Rails Version4.0.0 Updaterc2
Rubyonrails ≫ Rails Version4.0.1 Updaterc1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.654
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N