netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-hqf9-rc9j-5fmj

Browse Source
This commit is contained in:
advisory-database[bot]
2023-07-05 17:51:18 +00:00
parent de312ac9f2
commit 99b9a99a2d
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2017/10/GHSA-hqf9-rc9j-5fmj/GHSA-hqf9-rc9j-5fmj.json
+7 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hqf9-rc9j-5fmj",
"modified": "2023-06-09T20:08:17Z",
"modified": "2023-07-05T17:50:02Z",
"published": "2017-10-24T18:33:36Z",
"aliases": [
"CVE-2014-0080"
],
"summary": "Array data injection vulnerability in activerecord",
"details": "SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute \"add data\" SQL commands via vectors involving \\ (backslash) characters that are not properly handled in operations on array columns.",
"details": "SQL injection vulnerability in `activerecord/lib/active_record/connection_adapters/postgresql/cast.rb` in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute \"add data\" SQL commands via vectors involving `\\` (backslash) characters that are not properly handled in operations on array columns.",
"severity": [
],
@@ -63,13 +63,17 @@
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-hqf9-rc9j-5fmj"
},
{
"type": "PACKAGE",
"url": "https://github.com/rails/rails/tree/main/activerecord"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2014-0080.yml"
},
{
"type": "WEB",
"url": "https://groups.google.com/forum/message/raw?msg=rubyonrails-security/Wu96YkTUR6s/pPLBMZrlwvYJ"
"url": "https://web.archive.org/web/20210301004521/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/Wu96YkTUR6s/pPLBMZrlwvYJ"
},
{
"type": "WEB",