CVE-2012-2694

Description

actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform null checks via a crafted request, as demonstrated by certain "[xyz, nil]" values, a related issue to CVE-2012-2660.

Risk Information

Base Score
8.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
0.184

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2012-2694 are fixed in Ruby-actionpack 3.1.6Windows
Vulnerabilities CVE-2012-2694 are fixed in Ruby-actionpack 3.2.6Windows
Vulnerabilities CVE-2012-2694 are fixed in Ruby-actionpack 3.0.14Windows
Vulnerabilities CVE-2012-2694 are fixed in Ruby-actionpack for Linux 3.1.6Linux
Vulnerabilities CVE-2012-2694 are fixed in Ruby-actionpack for Linux 3.2.6Linux
Vulnerabilities CVE-2012-2694 are fixed in Ruby-actionpack for Linux 3.0.14Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234