Vulnerability Name:

CVE-2013-3221 (CCN-83716)

Assigned:2013-02-07
Published:2013-02-07
Updated:2019-08-08
Summary:The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attacks against Ruby on Rails applications via a crafted value, as demonstrated by unintended interaction between the "typed XML" feature and a MySQL database.
CVSS v3 Severity:6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
5.2 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N/E:U/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N)
5.2 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N/E:U/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-20
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2013-3221

Source: CCN
Type: oss-sec mailing list, Thu, 07 Feb 2013 11:51:36 +1300
Potential Query Manipulation with Common Rails Practises

Source: MLIST
Type: UNKNOWN
[oss-security] 20130207 Potential Query Manipulation with Common Rails Practises

Source: MLIST
Type: UNKNOWN
[oss-security] 20130424 CVE-2013-3221 can also relate to Microsoft SQL Server and IBM DB2

Source: MISC
Type: UNKNOWN
http://pl.reddit.com/r/netsec/comments/17yajp/mysql_madness_and_rails/

Source: CCN
Type: Ruby on Rails Web Site
Ruby on Rails

Source: MISC
Type: Exploit
http://www.phenoelit.org/blog/archives/2013/02/index.html

Source: CCN
Type: Red Hat Bugzilla Bug 954365
CVE-2013-3221 rubygem-activerecord: Data-type injection attacks due absent database column data type (input vs stored value) check

Source: XF
Type: UNKNOWN
rubyonrails-cve20133221-code-exec(83716)

Source: CONFIRM
Type: UNKNOWN
https://gist.github.com/dakull/5442275

Source: MLIST
Type: UNKNOWN
[rubyonrails-security] 20130207 Potential Query Manipulation with Common Rails Practises

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2013-3221

Vulnerable Configuration:Configuration 1:
  • cpe:/a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.9:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*

  • Configuration 2:
  • cpe:/a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.1:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.2:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.6:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.7:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.10:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.12:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.13:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.4:-:*:*:*:*:*:*

  • Configuration 3:
  • cpe:/a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*

  • Configuration 4:
  • cpe:/a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.9:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.6:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.7:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.4:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.8:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.5:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.2:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.13:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.10:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.12:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.1:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.20:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.2:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.4:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.5:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.8:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.7:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.9:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.0:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.4:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.3:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.2:-:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*
  • OR cpe:/a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:com.ubuntu.precise:def:20133221000
    V
    CVE-2013-3221 on Ubuntu 12.04 LTS (precise) - medium.
    2013-04-21
    oval:com.ubuntu.trusty:def:20133221000
    V
    CVE-2013-3221 on Ubuntu 14.04 LTS (trusty) - medium.
    2013-04-21
    BACK
    rubyonrails rails 2.3.0
    rubyonrails rails 2.3.1
    rubyonrails rails 2.3.2
    rubyonrails rails 2.3.3
    rubyonrails rails 2.3.4
    rubyonrails rails 2.3.9
    rubyonrails rails 2.3.10
    rubyonrails rails 2.3.11
    rubyonrails rails 2.3.12
    rubyonrails rails 2.3.13
    rubyonrails rails 2.3.14
    rubyonrails rails 2.3.15
    rubyonrails rails 2.3.16
    rubyonrails rails 3.0.0
    rubyonrails rails 3.0.0 beta
    rubyonrails rails 3.0.0 beta2
    rubyonrails rails 3.0.0 beta3
    rubyonrails rails 3.0.0 beta4
    rubyonrails rails 3.0.0 rc
    rubyonrails rails 3.0.0 rc2
    rubyonrails rails 3.0.1
    rubyonrails rails 3.0.1 pre
    rubyonrails rails 3.0.2
    rubyonrails rails 3.0.2 pre
    rubyonrails rails 3.0.3
    rubyonrails rails 3.0.4 rc1
    rubyonrails rails 3.0.5
    rubyonrails rails 3.0.5 rc1
    rubyonrails rails 3.0.6
    rubyonrails rails 3.0.6 rc1
    rubyonrails rails 3.0.6 rc2
    rubyonrails rails 3.0.7
    rubyonrails rails 3.0.7 rc1
    rubyonrails rails 3.0.7 rc2
    rubyonrails rails 3.0.8
    rubyonrails rails 3.0.8 rc1
    rubyonrails rails 3.0.8 rc2
    rubyonrails rails 3.0.8 rc3
    rubyonrails rails 3.0.8 rc4
    rubyonrails rails 3.0.9
    rubyonrails rails 3.0.9 rc1
    rubyonrails rails 3.0.9 rc2
    rubyonrails rails 3.0.9 rc3
    rubyonrails rails 3.0.9 rc4
    rubyonrails rails 3.0.9 rc5
    rubyonrails rails 3.0.10
    rubyonrails rails 3.0.10 rc1
    rubyonrails rails 3.0.11
    rubyonrails rails 3.0.12
    rubyonrails rails 3.0.12 rc1
    rubyonrails rails 3.0.13
    rubyonrails rails 3.0.13 rc1
    rubyonrails rails 3.0.14
    rubyonrails rails 3.0.16
    rubyonrails rails 3.0.17
    rubyonrails rails 3.0.18
    rubyonrails rails 3.0.19
    rubyonrails rails 3.0.20
    rubyonrails ruby on rails 3.0.4
    rubyonrails rails 3.1.0
    rubyonrails rails 3.1.0 beta1
    rubyonrails rails 3.1.0 rc1
    rubyonrails rails 3.1.0 rc2
    rubyonrails rails 3.1.0 rc3
    rubyonrails rails 3.1.0 rc4
    rubyonrails rails 3.1.0 rc5
    rubyonrails rails 3.1.0 rc6
    rubyonrails rails 3.1.0 rc7
    rubyonrails rails 3.1.0 rc8
    rubyonrails rails 3.1.1
    rubyonrails rails 3.1.1 rc1
    rubyonrails rails 3.1.1 rc2
    rubyonrails rails 3.1.1 rc3
    rubyonrails rails 3.1.2
    rubyonrails rails 3.1.2 rc1
    rubyonrails rails 3.1.2 rc2
    rubyonrails rails 3.1.3
    rubyonrails rails 3.1.4
    rubyonrails rails 3.1.4 rc1
    rubyonrails rails 3.1.5
    rubyonrails rails 3.1.5 rc1
    rubyonrails rails 3.1.6
    rubyonrails rails 3.1.7
    rubyonrails rails 3.1.8
    rubyonrails rails 3.1.9
    rubyonrails rails 3.1.10
    rubyonrails rails 3.2.0
    rubyonrails rails 3.2.0 rc1
    rubyonrails rails 3.2.0 rc2
    rubyonrails rails 3.2.1
    rubyonrails rails 3.2.2
    rubyonrails rails 3.2.2 rc1
    rubyonrails rails 3.2.3
    rubyonrails rails 3.2.3 rc1
    rubyonrails rails 3.2.3 rc2
    rubyonrails rails 3.2.4
    rubyonrails rails 3.2.4 rc1
    rubyonrails rails 3.2.5
    rubyonrails rails 3.2.6
    rubyonrails rails 3.2.7
    rubyonrails rails 3.2.8
    rubyonrails rails 3.2.9
    rubyonrails rails 3.2.10
    rubyonrails rails 3.2.11
    rubyonrails rails 2.3.11
    rubyonrails rails 2.3.12
    rubyonrails rails 2.3.10
    rubyonrails rails 2.3.14
    rubyonrails rails 2.3.13
    rubyonrails rails 2.3.16
    rubyonrails rails 2.3.15
    rubyonrails rails 2.3.3
    rubyonrails rails 2.3.0
    rubyonrails rails 2.3.2
    rubyonrails rails 2.3.9 -
    rubyonrails rails 2.3.1
    rubyonrails rails 2.3.4
    rubyonrails rails 3.0.8 rc1
    rubyonrails rails 3.0.5 rc1
    rubyonrails rails 3.0.8 rc2
    rubyonrails rails 3.0.6 -
    rubyonrails rails 3.0.8 rc3
    rubyonrails rails 3.0.6 rc1
    rubyonrails rails 3.0.8 rc4
    rubyonrails rails 3.0.6 rc2
    rubyonrails rails 3.0.7 -
    rubyonrails rails 3.0.4 -
    rubyonrails rails 3.0.16
    rubyonrails rails 3.0.7 rc1
    rubyonrails rails 3.0.4 rc1
    rubyonrails rails 3.0.7 rc2
    rubyonrails rails 3.0.4 rc1
    rubyonrails rails 3.0.8 -
    rubyonrails rails 3.0.5 -
    rubyonrails rails 3.0.17
    rubyonrails rails 3.0.9 rc4
    rubyonrails rails 3.0.18
    rubyonrails rails 3.0.2 -
    rubyonrails rails 3.0.9 rc5
    rubyonrails rails 3.0.1 pre
    rubyonrails rails 3.0.2 pre
    rubyonrails rails 3.0.3
    rubyonrails rails 3.0.9 -
    rubyonrails rails 3.0.14
    rubyonrails rails 3.0.9 rc1
    rubyonrails rails 3.0.13 -
    rubyonrails rails 3.0.9 rc2
    rubyonrails rails 3.0.12 rc1
    rubyonrails rails 3.0.9 rc3
    rubyonrails rails 3.0.13 rc1
    rubyonrails rails 3.0.10 rc1
    rubyonrails rails 3.0.10 -
    rubyonrails rails 3.0.12 -
    rubyonrails rails 3.0.11
    rubyonrails rails 3.0.0 rc
    rubyonrails rails 3.0.0 beta4
    rubyonrails rails 3.0.1 -
    rubyonrails rails 3.0.0 rc2
    rubyonrails rails 3.0.0 beta
    rubyonrails rails 3.0.0 -
    rubyonrails rails 3.0.0 beta3
    rubyonrails rails 3.0.0 beta2
    rubyonrails rails 3.0.20
    rubyonrails rails 3.0.19
    rubyonrails rails 3.1.8
    rubyonrails rails 3.1.7
    rubyonrails rails 3.1.9
    rubyonrails rails 3.1.0 -
    rubyonrails rails 3.1.0 beta1
    rubyonrails rails 3.1.0 rc6
    rubyonrails rails 3.1.0 rc5
    rubyonrails rails 3.1.0 rc8
    rubyonrails rails 3.1.0 rc7
    rubyonrails rails 3.1.0 rc2
    rubyonrails rails 3.1.0 rc1
    rubyonrails rails 3.1.0 rc4
    rubyonrails rails 3.1.0 rc3
    rubyonrails rails 3.1.2 rc2
    rubyonrails rails 3.1.2 -
    rubyonrails rails 3.1.3
    rubyonrails rails 3.1.1 rc1
    rubyonrails rails 3.1.1 -
    rubyonrails rails 3.1.1 rc3
    rubyonrails rails 3.1.1 rc2
    rubyonrails rails 3.1.5 rc1
    rubyonrails rails 3.1.10
    rubyonrails rails 3.1.6
    rubyonrails rails 3.1.4 rc1
    rubyonrails rails 3.1.4 -
    rubyonrails rails 3.1.5 -
    rubyonrails rails 3.1.2 rc1
    rubyonrails rails 3.2.8 -
    rubyonrails rails 3.2.7 -
    rubyonrails rails 3.2.9 -
    rubyonrails rails 3.2.10
    rubyonrails rails 3.2.0 rc1
    rubyonrails rails 3.2.0 rc2
    rubyonrails rails 3.2.11
    rubyonrails rails 3.2.0 -
    rubyonrails rails 3.2.4 rc1
    rubyonrails rails 3.2.4 -
    rubyonrails rails 3.2.3 rc1
    rubyonrails rails 3.2.3 rc2
    rubyonrails rails 3.2.2 rc1
    rubyonrails rails 3.2.3 -
    rubyonrails rails 3.2.1
    rubyonrails rails 3.2.2 -
    rubyonrails rails 3.2.6
    rubyonrails rails 3.2.5