CVE-2012-2694.yml

---
gem: actionpack
framework: rails
cve: 2012-2694
ghsa: q34c-48gc-m9g8
url: https://groups.google.com/g/rubyonrails-security/c/jILZ34tAHF4/m/7x0hLH-o0-IJ
title: Unsafe Query Generation Risk in Ruby on Rails
date: 2017-10-24
description: |
  actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails
  before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not
  properly consider differences in parameter handling between the
  Active Record component and the Rack interface, which allows remote
  attackers to bypass intended database-query restrictions and perform
  NULL checks via a crafted request, as demonstrated by certain
  "['xyz', nil]" values, a related issue to CVE-2012-2660.
cvss_v2: 4.3
patched_versions:
  - "~> 3.0.14"
  - "~> 3.1.6"
  - ">= 3.2.6"
related:
  url:
    - https://nvd.nist.gov/vuln/detail/CVE-2012-2694
    - https://groups.google.com/g/rubyonrails-security/c/jILZ34tAHF4/m/7x0hLH-o0-IJ
    - https://github.com/advisories/GHSA-q34c-48gc-m9g8
    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html
    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html
    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html
    - http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html
    - http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html
    - http://rhn.redhat.com/errata/RHSA-2013-0154.html