Security Advisory
CVE-2014-3482
7.5
Vulnerability Description
SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper bitstring quoting.
Published Date
July 7, 2014
Official Source
NIST NVD Advisory