Debian Rails vulnerabilities

CVE-2014-3483 [HIGH] CVE-2014-3483: rails - SQL injection vulnerability in activerecord/lib/active_record/connection_adapter... SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL commands by leveraging improper range quoting. Scope: local bookworm: resolved (fixed in 2:4.1.4-1) bullseye: resolved

CVE-2014-0082 [MEDIUM] CVE-2014-0082: rails - actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x ... actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers. Scope: local bookworm: resolved (fixed in 2.3.14.1) bullseye: reso

CVE-2014-7818 [MEDIUM] CVE-2014-7818: rails - Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/s... Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via a /..%2F sequence. Scope: loc

CVE-2014-0081 [MEDIUM] CVE-2014-0081: rails - Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_vie... Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage,

CVE-2014-7829 [MEDIUM] CVE-2014-7829: rails - Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/s... Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.21, 4.0.x before 4.0.12, 4.1.x before 4.1.8, and 4.2.x before 4.2.0.beta4, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via vectors involving a \ (backsl

CVE-2014-0080 [MEDIUM] CVE-2014-0080: rails - SQL injection vulnerability in activerecord/lib/active_record/connection_adapter... SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ (backslash) characters that are not properly handled in operations on array columns. Scope

CVE-2013-0277 [CRITICAL] CVE-2013-0277: rails - ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote a... ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML. Scope: local bookworm: resolved (fixed in 2.3.14.1) bullseye: resolved (fixed in 2.3.14.1) forky: resolved (fixed in 2.3.14.1

CVE-2013-0156 [HIGH] CVE-2013-0156: rails - active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.... active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity

CVE-2013-0333 [HIGH] CVE-2013-0333: rails - lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 an... lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability t

CVE-2013-1855 [MEDIUM] CVE-2013-1855: rails - The sanitize_css method in lib/action_controller/vendor/html-scanner/html/saniti... The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style

CVE-2013-1857 [MEDIUM] CVE-2013-1857: rails - The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.... The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted schem

CVE-2013-1854 [MEDIUM] CVE-2013-1854: rails - The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3... The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method. Scope: local bookworm: resolved (fixed in 2.3.14.1) bullseye: resolved (fixed in 2.3.14.1) forky: res

CVE-2013-0276 [MEDIUM] CVE-2013-0276: rails - ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x befo... ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request. Scope: local bookworm: resolved (fixed in 2.3.14.1) bullseye: resolved (fixed in 2.3.14.1) forky: resolved (fixed in 2.3.14.1) sid: resolved (fix

CVE-2013-0155 [MEDIUM] CVE-2013-0155: rails - Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 ... Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demo

CVE-2013-3221 [MEDIUM] CVE-2013-3221: rails - The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does... The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attacks against Ruby on Rails applications via a crafted value, as demonstrated

CVE-2013-4491 [MEDIUM] CVE-2013-4491: rails - Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/t... Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/translation_helper.rb in the internationalization component in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted string that triggers generation of a fallback string by the i18n gem. Scope: local bookworm: resol

CVE-2013-6416 [MEDIUM] CVE-2013-6416: rails - Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpa... Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2013-6414 [MEDIUM] CVE-2013-6414: rails - actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x... actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved

CVE-2013-6417 [MEDIUM] CVE-2013-6417: rails - actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 an... actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a craft

CVE-2013-6415 [MEDIUM] CVE-2013-6415: rails - Cross-site scripting (XSS) vulnerability in the number_to_currency helper in act... Cross-site scripting (XSS) vulnerability in the number_to_currency helper in actionpack/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the unit parameter. Scope: local bookworm: resolved bullseye: resolved forky: resolved sid: resolved trixie: resolved