CVE-2010-3933
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.
| Software | From | Fixed in |
|---|---|---|
| rubyonrails / rails | 2.3.9 | 2.3.9.x |
| rubyonrails / rails | 3.0.0 | 3.0.0.x |
rails
|
2.3.9 | 2.3.10 |
|
rails
|
3.0.0 | 3.0.1 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime