{"action":"Upgrade activerecord to 2.3.15 or later.","affected":[{"fixed":"3.0.18","introduced":"3.0.0.beta"},{"fixed":"3.1.9","introduced":"3.1.0"},{"fixed":"3.2.10","introduced":"3.2.0"},{"fixed":"2.3.15","introduced":"0"}],"component":"activerecord","cve_ids":["CVE-2012-6496"],"ecosystem":"RubyGems","epss":0.04582,"exploited":false,"fixed_versions":["3.0.18","3.1.9","3.2.10","2.3.15"],"ghsa_id":"GHSA-gh2w-j7cx-2664","id":"tcs_01M5KEKAQBGVWZA0JBK9K45T0W","modified_at":"2025-01-21T17:08:19.377001Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-gh2w-j7cx-2664","https://nvd.nist.gov/vuln/detail/CVE-2012-6496","https://github.com/rails/rails/commit/9de9b359d0d24f70f0f6c5c58a7ad8750684d456","https://bugzilla.redhat.com/show_bug.cgi?id=889649","https://github.com/rails/rails","https://groups.google.com/group/rubyonrails-security/msg/23daa048baf28b64?dmode=source&output=gplain","http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts","http://rhn.redhat.com/errata/RHSA-2013-0154.html","http://rhn.redhat.com/errata/RHSA-2013-0220.html","http://rhn.redhat.com/errata/RHSA-2013-0544.html","http://security.gentoo.org/glsa/glsa-201401-22.xml"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-gh2w-j7cx-2664","url":"https://osv.dev/vulnerability/GHSA-gh2w-j7cx-2664"}],"summary":"Active Record contains SQL Injection"}