Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby on Rails 输入验证错误漏洞
Vulnerability Description
Ruby on Rails是美国Rails团队的一套基于Ruby语言的开源Web应用框架。 Ruby on Rails存在输入验证错误漏洞，该漏洞源于Active Record组件通过将哈希键转换为符号来处理某些查询，这允许远程攻击者通过精心设计的输入造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A