Description

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting.

Remediation

References

CVE-2014-3483

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8092)

Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2694)

Oracle Database Server CVE-2015-2585 Vulnerability (CVE-2015-2585)

WordPress Plugin NextGEN Gallery-WordPress Gallery Unspecified Vulnerability (2.0.77.3)

Oracle JRE CVE-2019-2988 Vulnerability (CVE-2019-2988)

Severity

High

Classification

CVE-2014-3483 CWE-138

Tags

Missing Update Known Vulnerabilities