CVE-2013-0277.yml

---
gem: activerecord
framework: rails
cve: 2013-0277
osvdb: 90073
ghsa: fhj9-cjjh-27vm
url: https://nvd.nist.gov/vuln/detail/CVE-2013-0277
title: 'CVE-2013-0277 rubygem-activerecord: Serialized Attributes YAML Vulnerability
  with Rails 2.3 and 3.0'
date: 2013-02-11
description: |
  ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows
  remote attackers to cause a denial of service or execute arbitrary code via crafted
  serialized attributes that cause the +serialize+ helper to deserialize arbitrary
  YAML.
cvss_v2: 10.0
patched_versions:
  - "~> 2.3.17"
  - ">= 3.1.0"