NVD

Id
17129  
Name
CVE-2016-0753  
Description
Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-02-15  
Modified Date
2016-12-05  
Seq
2016-0753  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95060 17129 CVE-2016-0753 FEDORA-2016-73fe05d878  View
95061 17129 CVE-2016-0753 FEDORA-2016-94e71ee673  View
95062 17129 CVE-2016-0753 FEDORA-2016-cb30088b06  View
95063 17129 CVE-2016-0753 FEDORA-2016-cc465a34df  View
95064 17129 CVE-2016-0753 FEDORA-2016-eb4d6e8aab  View
95065 17129 CVE-2016-0753 SUSE-SU-2016:1146  View
95066 17129 CVE-2016-0753 openSUSE-SU-2016:0372  View
95067 17129 CVE-2016-0753 RHSA-2016:0296  View
95068 17129 CVE-2016-0753 DSA-3464  View
95069 17129 CVE-2016-0753 [oss-security] 20160125 [CVE-2016-0753] Possible Input Validation Circumvention in Active Model  View
95070 17129 CVE-2016-0753 82247  View
95071 17129 CVE-2016-0753 [ruby-security-ann] 20160125 [CVE-2016-0753] Possible Input Validation Circumvention in Active Model  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
905 JVNDB-2016-001678 Ruby on Rails の Active Model における検証手順を回避される脆弱性 Ruby on Rails の Active Model は、クラスアクセサのインスタンスレベルの writer の使用をサポートするため、検証手順を回避される脆弱性が存在します。 CVE-2016-0753 86957 CVE-2016-0753 17129 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001678.html 2016-01-25 2016-03-11 View