{"action":"Upgrade activerecord to 4.0.7 or later.","affected":[{"fixed":"4.0.7","introduced":"4.0.0"},{"fixed":"4.1.3","introduced":"4.1.0"}],"component":"activerecord","cve_ids":["CVE-2014-3483"],"ecosystem":"RubyGems","epss":0.04181,"exploited":false,"fixed_versions":["4.0.7","4.1.3"],"ghsa_id":"GHSA-r8fh-hq2p-7qhq","id":"tcs_01M5KEN72BBQPZ8HGSA41AC26S","modified_at":"2024-11-29T05:28:07.785614Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-r8fh-hq2p-7qhq","https://nvd.nist.gov/vuln/detail/CVE-2014-3483","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2014-3483.yml","https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J","https://web.archive.org/web/20200228150648/http://www.securityfocus.com/bid/68341","http://openwall.com/lists/oss-security/2014/07/02/5","http://rhn.redhat.com/errata/RHSA-2014-0877.html","http://www.debian.org/security/2014/dsa-2982"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-r8fh-hq2p-7qhq","url":"https://osv.dev/vulnerability/GHSA-r8fh-hq2p-7qhq"}],"summary":"Active Record contains SQL Injection via improper range quoting"}