Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2010-3933
6.4
MEDIUMCVSS v2
Published
October 28, 2010
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 2.3.9, = 3.0.0NVD
GitHub