The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Note | — | Apply OS X security update 2013-002Upgrade macOS to the latest version | Aug 28, 2015 | Feb 12, 2013 |
| Apple Osx Ruby | — | Apply OS X security update 2013-002 | Jun 20, 2013 | Feb 12, 2013 |
| Debian | — | Upgrade rails | Jul 30, 2024 | Feb 13, 2013 |
| Gentoo Linux | — | Upgrade dev-ruby/rails. | Oct 30, 2017 | Feb 12, 2013 |
| Ruby_on_rails | — | Upgrade to the latest version of Ruby on Rails | Jan 3, 2020 | Feb 13, 2013 |
| Suse | — | Upgrade rubygem-rack-1_2-testsuiteUpgrade rubygem-activeresource-2_3-testsuiteUpgrade rubygem-activeresourceUpgrade rubygem-railsUpgrade rubygem-activeresource-2_3-docUpgrade rubygem-activerecord-2_3-docUpgrade rubygem-activesupport-2_3-docUpgrade rubygem-actionmailer-3_2-docUpgrade rubygem-activemodel-3_2-docUpgrade rubygem-activesupportUpgrade rubygem-actionpackUpgrade sle-sdk-releaseUpgrade rubygem-rack-1_2Upgrade rubygem-actionpack-2_3-docUpgrade rubygem-activerecord-2_3-testsuiteUpgrade rubygem-rack-1_1-testsuiteUpgrade rubygem-activesupport-2_3Upgrade rubygem-rack-1_3Upgrade rubygem-rack-1_2-docUpgrade rubygem-rack-1_1Upgrade rubygem-actionmailer-2_3-docUpgrade rubygem-rails-3_2Upgrade rubygem-rack-1_4-docUpgrade rubygem-actionmailerUpgrade rubygem-activerecordUpgrade rubygem-rack-1_3-docUpgrade rubygem-railties-3_2Upgrade rubygem-actionmailer-2_3-testsuiteUpgrade rubygem-actionpack-3_2-docUpgrade rubygem-activemodel-3_2Upgrade rubygem-actionmailer-3_2Upgrade rubygem-activeresource-3_2Upgrade rubygem-rails-2_3-docUpgrade rubygem-actionpack-2_3-testsuiteUpgrade rubygem-actionpack-2_3Upgrade rubygem-activeresource-3_2-docUpgrade rubygem-rails-3_2-docUpgrade rubygem-actionmailer-2_3Upgrade rubygem-rack-1_4Upgrade rubygem-activerecord-3_2Upgrade rubygem-actionpack-3_2Upgrade rubygem-rack-1_1-docUpgrade rubygem-activerecord-2_3Upgrade rubygem-rack-1_4-testsuiteUpgrade rubygem-activesupport-3_2-docUpgrade rubygem-rails-2_3Upgrade rubygem-activesupport-3_2Upgrade rubygem-rack-1_3-testsuiteUpgrade rubygem-railties-3_2-docUpgrade rubygem-activeresource-2_3Upgrade rubygem-activerecord-3_2-doc | Feb 17, 2015 | Feb 12, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub