CVE-2012-2694

Description

actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "['xyz', nil]" values, a related issue to CVE-2012-2660.

References

https://github.com/advisories/GHSA-m8h6-m9p5-p2f8

https://github.com/advisories/GHSA-q34c-48gc-m9g8

https://github.com/advisories/GHSA-hgpp-pp89-4fgf

https://github.com/advisories/GHSA-gppp-5xc5-wfpx

http://rhn.redhat.com/errata/RHSA-2013-0154.html

http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS