VYPR

rpm package

opensuse/rubygem-railties-4_2&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/rubygem-railties-4_2&distro=openSUSE%20Tumbleweed

Vulnerabilities (1)

  • CVE-2014-3514Aug 20, 2014
    affected < 5.0.0.1-1.1fixed 5.0.0.1-1.1

    activerecord/lib/active_record/relation/query_methods.rb in Active Record in Ruby on Rails 4.0.x before 4.0.9 and 4.1.x before 4.1.5 allows remote attackers to bypass the strong parameters protection mechanism via crafted input to an application that makes create_with calls.