VULNERABILITY INTELLIGENCE
CVE-2013-0276
CVSS score4.3 MEDIUM
EPSS probability2.46%
CISA KEVNot currently listed
Published2013-02-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.