Skip to content
OpenAdvisories
Unscored RHSA-2013:0699 1 CVE

Red Hat Security Advisory: ruby193-rubygem-activerecord security update

Published Sep 15, 2024 · Updated Jan 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-activerecord 1:3.2.8-6.el6
Red Hat · OpenShift 1 openshift:1::el6 ruby193-rubygem-activerecord-doc 1:3.2.8-6.el6

Vulnerabilities 1

  • Medium —
    CVE-2013-1854

    Active Record Improper Input Validation

    The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a wher…

    rails activerecord Debian RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=921329
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0699.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1854
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1854
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1854