Ruby On Rails 4.1.13 Release Candidate 1

CPE Details

Ruby On Rails 4.1.13 Release Candidate 1
rubyonrails
ruby_on_rails
4.1.13
2016-03-14
13h23 +00:00
2019-08-08
13h09 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:rubyonrails:ruby_on_rails:4.1.13:rc1:*:*:*:*:*:*

Informations

Vendor

rubyonrails

Product

ruby_on_rails

Version

4.1.13

Update

rc1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2017-17919 2017-12-29 15h00 +00:00 SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
8.1
Haute
CVE-2017-17920 2017-12-29 15h00 +00:00 SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
8.1
Haute