tocsin

Debian/rails: unknown

SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a c

Action: Upgrade rails to 2.3.14.1 or later.

Affected

introducedfixedlast affected
02.3.14.1-

Fixed versions

2.3.14.1

Sources

published · modified · JSON