CVE-2011-2930: SQL Injection
An SQL injection vulnerability in the quotetablename method could allow malicious users to inject arbitrary SQL into a query [1].
This is corrected in upstream 3.0.10, 2.3.13, and 3.1.0rc5 versions. Patches are available in the advisory [1] and in git [2].
[1] http://groups.google.com/group/rubyonrails-security/browsethread/thread/6a1e473744bc389b [2] https://github.com/rails/rails/commit/8a39f411dc3c806422785b1f4d5c7c9d58e4bf85
Other sources
Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a crafted column name.
Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a crafted column name.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2930?
CVE-2011-2930 has a high severity rating due to its ability to allow SQL injection attacks.
How do I fix CVE-2011-2930?
To fix CVE-2011-2930, upgrade to ActiveRecord version 3.0.10, 2.3.13, or 3.1.0rc5 or apply available patches.
Which software is affected by CVE-2011-2930?
CVE-2011-2930 affects specific versions of ActiveRecord including 3.0.0 through 3.0.9 and 2.0.0 through 2.3.12.
Is there a workaround for CVE-2011-2930?
There is no documented workaround for CVE-2011-2930; the only resolution is to update to the patched versions.
What kind of attacks can exploit CVE-2011-2930?
CVE-2011-2930 can be exploited via SQL injection attacks, enabling attackers to execute arbitrary SQL code.