tocsin

Debian/rails: unknown

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serial

Action: Upgrade rails to 2.3.14.1 or later.

Affected

introducedfixedlast affected
02.3.14.1-

Fixed versions

2.3.14.1

Sources

published · modified · JSON