github - ghsa-jmm9-2p29-vh2w

ghsa-jmm9-2p29-vh2w

Vulnerability from github

Published

2017-10-24 18:33

Modified

2023-05-12 17:17

Summary

activerecord vulnerable to SQL Injection

Details

Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "RubyGems",
        "name": "activerecord"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0"
            },
            {
              "fixed": "3.0.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2011-0448"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-89"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-06-16T21:43:51Z",
    "nvd_published_at": "2011-02-21T18:00:01Z",
    "severity": "HIGH"
  },
  "details": "Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument.",
  "id": "GHSA-jmm9-2p29-vh2w",
  "modified": "2023-05-12T17:17:16Z",
  "published": "2017-10-24T18:33:38Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0448"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rails/rails/commit/354da43ab0a10b3b7b3f9cb0619aa562c3be8474"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/rails/rails"
    },
    {
      "type": "WEB",
      "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2011-0448.yml"
    },
    {
      "type": "WEB",
      "url": "https://web.archive.org/web/20201220214809/http://securitytracker.com/id?1025063"
    },
    {
      "type": "WEB",
      "url": "http://groups.google.com/group/rubyonrails-security/msg/4e19864cf6ad40ad?dmode=source\u0026output=gplain"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html"
    },
    {
      "type": "WEB",
      "url": "http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "activerecord vulnerable to SQL Injection"
}

cve-2011-0448

Vulnerability from cvelistv5

Published

2011-02-21 00:00

Modified

2024-08-06 21:51

Severity ?

Summary

References

▼	URL	Tags
	http://groups.google.com/group/rubyonrails-security/msg/4e19864cf6ad40ad?dmode=source&output=gplain	mailing-list
	http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4
	http://securitytracker.com/id?1025063	vdb-entry
	http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html	vendor-advisory
	http://secunia.com/advisories/43278	third-party-advisory
	http://www.vupen.com/english/advisories/2011/0877	vdb-entry
	https://github.com/rails/rails/commit/354da43ab0a10b3b7b3f9cb0619aa562c3be8474

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:51:09.165Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[rubyonrails-security] 20110209 Potential SQL Injection in Rails 3.0.x",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://groups.google.com/group/rubyonrails-security/msg/4e19864cf6ad40ad?dmode=source\u0026output=gplain"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4"
          },
          {
            "name": "1025063",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025063"
          },
          {
            "name": "FEDORA-2011-4358",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html"
          },
          {
            "name": "43278",
            "tags": [
              "third-party-advisory",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/43278"
          },
          {
            "name": "ADV-2011-0877",
            "tags": [
              "vdb-entry",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0877"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/rails/rails/commit/354da43ab0a10b3b7b3f9cb0619aa562c3be8474"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-02-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Ruby on Rails 3.0.x before 3.0.4 does not ensure that arguments to the limit function specify integer values, which makes it easier for remote attackers to conduct SQL injection attacks via a non-numeric argument."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-07T22:13:48.916887",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "[rubyonrails-security] 20110209 Potential SQL Injection in Rails 3.0.x",
          "tags": [
            "mailing-list"
          ],
          "url": "http://groups.google.com/group/rubyonrails-security/msg/4e19864cf6ad40ad?dmode=source\u0026output=gplain"
        },
        {
          "url": "http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4"
        },
        {
          "name": "1025063",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://securitytracker.com/id?1025063"
        },
        {
          "name": "FEDORA-2011-4358",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html"
        },
        {
          "name": "43278",
          "tags": [
            "third-party-advisory"
          ],
          "url": "http://secunia.com/advisories/43278"
        },
        {
          "name": "ADV-2011-0877",
          "tags": [
            "vdb-entry"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0877"
        },
        {
          "url": "https://github.com/rails/rails/commit/354da43ab0a10b3b7b3f9cb0619aa562c3be8474"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-0448",
    "datePublished": "2011-02-21T00:00:00",
    "dateReserved": "2011-01-13T00:00:00",
    "dateUpdated": "2024-08-06T21:51:09.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted