CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0276

ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.6%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-0276

Rubyonrails » Rails » Version: 2.3.0

cpe:2.3:a:rubyonrails:rails:2.3.0
Rubyonrails » Rails » Version: 2.3.1

cpe:2.3:a:rubyonrails:rails:2.3.1
Rubyonrails » Rails » Version: 2.3.10

cpe:2.3:a:rubyonrails:rails:2.3.10
Rubyonrails » Rails » Version: 2.3.11

cpe:2.3:a:rubyonrails:rails:2.3.11
Rubyonrails » Rails » Version: 2.3.12

cpe:2.3:a:rubyonrails:rails:2.3.12
Rubyonrails » Rails » Version: 2.3.13

cpe:2.3:a:rubyonrails:rails:2.3.13
Rubyonrails » Rails » Version: 2.3.14

cpe:2.3:a:rubyonrails:rails:2.3.14
Rubyonrails » Rails » Version: 2.3.15

cpe:2.3:a:rubyonrails:rails:2.3.15
Rubyonrails » Rails » Version: 2.3.16

cpe:2.3:a:rubyonrails:rails:2.3.16
Rubyonrails » Rails » Version: 2.3.2

cpe:2.3:a:rubyonrails:rails:2.3.2
Rubyonrails » Rails » Version: 2.3.3

cpe:2.3:a:rubyonrails:rails:2.3.3
Rubyonrails » Rails » Version: 2.3.4

cpe:2.3:a:rubyonrails:rails:2.3.4
Rubyonrails » Rails » Version: 2.3.9

cpe:2.3:a:rubyonrails:rails:2.3.9
Rubyonrails » Rails » Version: 3.1.0

cpe:2.3:a:rubyonrails:rails:3.1.0
Rubyonrails » Rails » Version: 3.1.1

cpe:2.3:a:rubyonrails:rails:3.1.1
Rubyonrails » Rails » Version: 3.1.10

cpe:2.3:a:rubyonrails:rails:3.1.10
Rubyonrails » Rails » Version: 3.1.2

cpe:2.3:a:rubyonrails:rails:3.1.2
Rubyonrails » Rails » Version: 3.1.3

cpe:2.3:a:rubyonrails:rails:3.1.3
Rubyonrails » Rails » Version: 3.1.4

cpe:2.3:a:rubyonrails:rails:3.1.4
Rubyonrails » Rails » Version: 3.1.5

cpe:2.3:a:rubyonrails:rails:3.1.5
Rubyonrails » Rails » Version: 3.1.6

cpe:2.3:a:rubyonrails:rails:3.1.6
Rubyonrails » Rails » Version: 3.1.7

cpe:2.3:a:rubyonrails:rails:3.1.7
Rubyonrails » Rails » Version: 3.1.8

cpe:2.3:a:rubyonrails:rails:3.1.8
Rubyonrails » Rails » Version: 3.1.9

cpe:2.3:a:rubyonrails:rails:3.1.9
Rubyonrails » Rails » Version: 3.2.0

cpe:2.3:a:rubyonrails:rails:3.2.0
Rubyonrails » Rails » Version: 3.2.1

cpe:2.3:a:rubyonrails:rails:3.2.1
Rubyonrails » Rails » Version: 3.2.10

cpe:2.3:a:rubyonrails:rails:3.2.10
Rubyonrails » Rails » Version: 3.2.11

cpe:2.3:a:rubyonrails:rails:3.2.11
Rubyonrails » Rails » Version: 3.2.2

cpe:2.3:a:rubyonrails:rails:3.2.2
Rubyonrails » Rails » Version: 3.2.3

cpe:2.3:a:rubyonrails:rails:3.2.3
Rubyonrails » Rails » Version: 3.2.4

cpe:2.3:a:rubyonrails:rails:3.2.4
Rubyonrails » Rails » Version: 3.2.5

cpe:2.3:a:rubyonrails:rails:3.2.5
Rubyonrails » Rails » Version: 3.2.6

cpe:2.3:a:rubyonrails:rails:3.2.6
Rubyonrails » Rails » Version: 3.2.7

cpe:2.3:a:rubyonrails:rails:3.2.7
Rubyonrails » Rails » Version: 3.2.8

cpe:2.3:a:rubyonrails:rails:3.2.8
Rubyonrails » Rails » Version: 3.2.9

cpe:2.3:a:rubyonrails:rails:3.2.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-0276

Products

Pricing

Contact Us