Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-0448
7.5
HIGHCVSS v2
Published
February 21, 2011
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 3.0.0, = 3.0.1, = 3.0.2, = 3.0.3, = 3.0.4NVD
GitHub