CVE-2014-0080 | BDVDB-2026-59990 Detail

Description#

SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, allows remote attackers to execute "add data" SQL commands via vectors involving \ (backslash) characters that are not properly handled in operations on array columns.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-02-20Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.