HexBrain

Ruby on Rails · Report #28449

Active Record SQL Injection Vulnerability Affecting PostgreSQL

Validstatus
2upvotes
2 Jul 2014disclosed

How it was found

This vulnerability was reported directly to Rails.

https://groups.google.com/forum/#!msg/rubyonrails-security/wDxePLJGZdI/WP7EasCJTA4J

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original