actionpack Improper Input Validation vulnerability
`active_support/core_ext/hash/conversions.rb` in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-0156US | high7.5 | Exploit | ||
active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of st… | ||||
02
references
External citations — patches, advisories, analysis.
- http://rhn.redhat.com/errata/RHSA-2013-0153.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0154.htmlWEB
- http://rhn.redhat.com/errata/RHSA-2013-0155.htmlWEB
- http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-releasedWEB
- http://www.debian.org/security/2013/dsa-2604WEB
- http://www.fujitsu.com/global/support/software/security/products-f/sw-sv-rcve-ror201301e.htmlWEB
- http://www.insinuator.net/2013/01/rails-yamlWEB
- http://www.kb.cert.org/vuls/id/380039WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan