Ruby on Rails 4.2.0 Beta 3

CPE Details

Ruby on Rails 4.2.0 Beta 3
rubyonrails
ruby_on_rails
4.2.0
2016-03-04
13h43 +00:00
2019-08-08
13h10 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:rubyonrails:ruby_on_rails:4.2.0:beta3:*:*:*:*:*:*

Informations

Vendor

rubyonrails

Product

ruby_on_rails

Version

4.2.0

Update

beta3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2017-17919 2017-12-29 15h00 +00:00 SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
8.1
Haute
CVE-2017-17920 2017-12-29 15h00 +00:00 SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
8.1
Haute