{"id":"CVE-2012-2661","published":"2012-06-22T14:00:00Z","modified":"2024-08-06T19:42:31Z","title":"The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not…","vendor":null,"product":null,"tier":"tail","description":{"text":"The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.04042,"percentile":0.90582,"provenance":"source"},"cwes":[],"references":[{"url":"https://groups.google.com/group/rubyonrails-security/msg/fc2da6c627fc92df?dmode=source&output=gplain","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0154.html","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":23.1,"factors":[{"name":"EPSS percentile","points":18.12},{"name":"Public exploit code","points":5.0}]},"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2022-02-23","earliestUrl":"https://github.com/r4x0r1337/-CVE-2012-2661-ActiveRecord-SQL-injection-","repos":[{"name":"r4x0r1337/-CVE-2012-2661-ActiveRecord-SQL-injection-","url":"https://github.com/r4x0r1337/-CVE-2012-2661-ActiveRecord-SQL-injection-","stars":1,"created":"2022-02-23"}]},"first":{"date":"2022-02-23","source":"PoC-in-GitHub","url":"https://github.com/r4x0r1337/-CVE-2012-2661-ActiveRecord-SQL-injection-"},"provenance":"source"},"affected":[{"ecosystem":"RubyGems","package":"activerecord","vulnerableRanges":[">=3.0.0, <3.0.13",">=3.1.0, <3.1.5",">=3.2.0, <3.2.4"],"patched":["3.0.13","3.1.5","3.2.4"],"from":["GHSA-fh39-v733-mxfr"],"provenance":"source"}],"euvd":{"id":"EUVD-2017-0229","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-activerecord-cve-2012-2661","children":[{"from":"CVE-2012-2661","to":"CVE-2012-2695","relation":"successor","confidence":"medium","kind":"lineage","orderedBy":"description","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…equest data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage improper handling of nested hashes, a related issue to CVE-2012-2661.","from":"CVE.org","in":"CVE-2012-2695"},{"kind":"text","provenance":"source","relation":"related","quote":"…e passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.","from":"CVE.org","in":"CVE-2012-2661"},{"kind":"version-step","provenance":"source","package":"RubyGems:activerecord","fromFixed":"3.0.13","toFixed":"3.0.14","daysApart":0},{"kind":"similar","provenance":"machine","score":0.78,"basis":"same package + description similarity"}]}],"packageHistory":[{"cve":"CVE-2011-0448","published":"2011-02-21","fixed":"3.0.4","kev":false},{"cve":"CVE-2011-2930","published":"2011-08-29","fixed":"3.1.0.rc5","kev":false,"link":{"from":"CVE-2011-2930","to":"CVE-2012-2661","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"RubyGems:activerecord","fromFixed":"3.0.10","toFixed":"3.0.13","daysApart":298}]}},{"cve":"CVE-2013-0277","published":"2013-02-13","fixed":"3.1.0","kev":false},{"cve":"CVE-2012-2661","published":"2012-06-22","fixed":"3.2.4","kev":false},{"cve":"CVE-2012-2695","published":"2012-06-22","fixed":"3.2.6","kev":false},{"cve":"CVE-2012-6496","published":"2013-01-04","fixed":"3.2.10","kev":false},{"cve":"CVE-2013-0155","published":"2013-01-13","fixed":"3.2.11","kev":false}],"package":"RubyGems:activerecord"}}