CVE-2012-2695

RubyGems/activerecord CVE-2012-2695: high

activerecord vulnerable to SQL Injection

Action: Upgrade activerecord to 2.3.15 or later.

bundle update activerecord

Affected

Fixed versions

Sources

• osv: GHSA-76wq-xw4h-f8wj
• https://nvd.nist.gov/vuln/detail/CVE-2012-2695
• https://github.com/rails/rails/commit/62f81f4d6b3ee40e9887ffd92ab14714bad93f18
• https://github.com/rails/rails
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2012-2695.yml
• https://groups.google.com/g/rubyonrails-security/c/l4L0TEVAz1k/m/Vr84sD9B464J
• https://groups.google.com/group/rubyonrails-security/msg/aee3413fb038bf56?dmode=source&output=gplain
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html
• http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html
• http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html
• http://rhn.redhat.com/errata/RHSA-2013-0154.html

CVE-2012-2695 · published 2017-10-24T18:33:38Z · modified 2025-01-21T15:34:40.818782Z · JSON