CVE-2013-0333
Published Jan 30, 2013
Last updated 2 years ago
Overview
- Description
- lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CEB24FC-F068-4EBD-BDC8-AB5BC56130DE"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E2DF384-3992-43BF-8A5C-65FA53E9A77C"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1467583-23E9-4E2B-982D-80A356174BB6"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DC784C0-5618-4C32-8C17-BE7041656E14"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFB9ABB5-1F78-4CF0-BA82-7833E0F7A56E"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF3ED96F-3EA4-4E47-A559-9DF9A7D3DDE2"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B38EAA4-E948-45A7-B6E5-7214F2B545E3"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6ECC8C49-5A46-4D23-81F9-8243F5D508DB"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "312848C5-BA35-4A48-B66D-195A5E1CD00F"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7453BE5-91C8-42B2-9F75-FFE4038F29A6"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2FD44EB-E899-4FA8-985E-44B75134DDC6"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E13E309-2411-4E1D-B27F-BF5DDDD5D5C5"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3BE7DFE-BA20-434B-A1DE-AD038B255C60"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.0:beta:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCEE5B21-C990-4705-8239-0D7B29DAEDA1"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65EE33B1-B079-4CDE-B9C2-F1613A4610DC"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CAAA20B-824F-4448-99DC-9712FE628073"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2BEBDFB-0F30-454A-B74C-F820C9D2708B"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.0:rc:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D7CD8C1-95D1-477E-AD96-6582EC33BA01"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6F00D98-3D0F-40AF-AE4F-090B1E6B660C"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9476CE55-69C0-45D3-B723-6F459C90BF05"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.1:pre:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "486F5BA6-BCF7-4691-9754-19D364B4438D"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "112FC73B-A8BC-4EEA-9F4B-CCE685EF2838"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.2:pre:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4498383-6FCA-4E17-A1FD-B0CE7EE50F85"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D26565B1-2BA6-4A3C-9264-7FC9A1820B59"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.4:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "644EF85E-6D3E-4F5C-96B0-49AD2A2D90CE"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "392E2D58-CB39-4832-B4D9-9C2E23B8E14C"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.5:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F2466EA-7039-46A1-B4A3-8DACD1953A59"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CAB4E72-0A15-4B26-9B69-074C278568D6"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.6:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A085E105-9375-440A-80CB-9B23E6D7EB4A"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.6:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25911E48-C5D7-4ED8-B4DB-7523A74CCF49"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE6EC1E5-3A4A-4751-9F77-28EF5AF681E3"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.7:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B29674E3-CC80-446B-9A43-82594AE7A058"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.7:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF34D8CB-2B6D-4CB8-A206-108293BCFFE7"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E5187F6-E3AC-4E0D-B1D0-83DE76C20A4B"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.8:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "272268EE-E3E8-4683-B679-55D748877A7E"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.8:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B69FD33-61FE-4F10-BBE1-215F59035D30"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.8:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08D7CB5D-82EF-4A24-A792-938FAB40863D"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.8:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A044B21-47D5-468D-AF4A-06B3B5CC0824"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2196F3D0-532A-40F9-843A-1DFBC8B63FDC"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.9:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBEDA932-6CB5-438C-94E4-824732A91BE0"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.9:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "903E5524-5E45-48CE-A804-EDAEBE3A79AD"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.9:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08534AF2-F94E-4FB6-A572-4FB9827276D4"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.9:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29E3B4A6-1346-4358-B7BC-84D00ED3ABBE"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.9:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B52D7A6B-DD93-45F0-9186-18ABEFF28DF4"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F07C641-48DF-43BE-9EB5-72B337C54846"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.10:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1CB1B12-99F5-430F-AE19-9A95C17FA123"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1A7C449-8F9A-4CE5-9C3D-375996BFAEE3"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05D5D58C-DB79-41EA-81AE-5D95C48211B0"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.12:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE331D6D-99BA-4369-AD8B-B556DEE4955F"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58304E17-ADFD-4686-9CCF-C1CA31843B94"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.13:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05108EF0-81AD-4378-9843-5C23F2AC79A3"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EE7DA7E-23A5-42AF-9D5C-39240CE2FBDB"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C448F62-8231-4221-ADA0-C9B848AE03D1"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FBD11A1-51C7-4AF7-AA0B-3A14C5435E70"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "60255706-C44A-48CB-B98B-A1F0991CBC74"
},
{
"criteria": "cpe:2.3:a:rubyonrails:rails:3.0.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0456E2E8-EF06-414E-8A7D-8005F0EB46B7"
},
{
"criteria": "cpe:2.3:a:rubyonrails:ruby_on_rails:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "224BD488-0D7E-4F8B-9012-DE872DEB544C"
}
],
"operator": "OR"
}
]
}
]