vulnwire
7.5high

CVE-2008-4094

Rails ActiveRecord gem vulnerable to SQL injection

Also known as GHSA-xf96-32q2-9rw2

Published 18 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.0%
percentile 88%
Public exploits
0
none known

Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :limit and (2) :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer.

Exploit prediction (EPSS)

3.03% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected packages

EcosystemPackageAffectedFixed in
rubygemsactiverecord
<2.1.1
2.1.1

Classification

Weakness
  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command
Technology feeds
Ruby on Rails (RSS, critical only)

References

  • gist.github.com /8946 · x_refsource_CONFIRM, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/45109 · vdb-entry, x_refsource_XF, x_transferred
  • openwall.com /lists/oss-security/2008/09/13/2 · mailing-list, x_refsource_MLIST, x_transferred
  • rails.lighthouseapp.com /projects/8994/tickets/964 · x_refsource_CONFIRM, x_transferred
  • rails.lighthouseapp.com /projects/8994/tickets/288 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/31875 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.opensuse.org /opensuse-security-announce/2008-12/msg00002.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • secunia.com /advisories/31910 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • blog.innerewut.de /2008/6/16/why-you-should-upgrade-to-rails-2-1 · x_refsource_MISC, x_transferred
  • securitytracker.com /id?1020871 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • rorsecurity.info /2008/09/08/sql-injection-issue-in-limit-and-offset-parameter/ · x_refsource_MISC, x_transferred
  • openwall.com /lists/oss-security/2008/09/16/1 · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /bid/31176 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/31909 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/2562 · vdb-entry, x_refsource_VUPEN, x_transferred
  • nvd.nist.gov /vuln/detail/CVE-2008-4094 · advisory
  • github.com /rails/rails/commit/ef0ea782b1f5cf7b08e74ea3002a16c708f66645 · web
  • github.com /rails/rails · package
  • github.com /rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2008-4094.yml · web
  • web.archive.org /web/20080620000955/http://blog.innerewut.de/2008/6/16/why-you-should-upgrade-to-rails-2-1 · web
  • web.archive.org /web/20080620201733/http://blog.innerewut.de/files/rails/activerecord-1.15.3.patch · web
  • web.archive.org /web/20080620201744/http://blog.innerewut.de/files/rails/activerecord-2.0.2.patch · web
  • web.archive.org /web/20081104151751/http://gist.github.com/8946 · web
  • web.archive.org /web/20081113122736/http://secunia.com/advisories/31875 · web
  • web.archive.org /web/20081207211431/http://secunia.com/advisories/31909 · web
  • web.archive.org /web/20081207211436/http://secunia.com/advisories/31910 · web
  • web.archive.org /web/20091101000000*/http://www.vupen.com/english/advisories/2008/2562 · web
  • web.archive.org /web/20120120194518/http://www.securityfocus.com/bid/31176 · web
  • web.archive.org /web/20201207112829/http://www.securitytracker.com/id?1020871 · web
  • rorsecurity.info /2008/09/08/sql-injection-issue-in-limit-and-offset-parameter · web

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.