Vulnerability Database
289,697
Total vulnerabilities in the database
CVE-2010-3933
Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.
| Software | From | Fixed in |
|---|---|---|
| rubyonrails / rails | 2.3.9 | 2.3.9.x |
| rubyonrails / rails | 3.0.0 | 3.0.0.x |
rails
|
2.3.9 | 2.3.10 |
|
rails
|
3.0.0 | 3.0.1 |