activerecord

• Author: kikadf
• Vulnerable: 3.2.13-1
• Unaffected: 3.2.13-2arcturus1

Sean Griffin discovered two vulnerabilities in the PostgreSQL adapter for Active Record which could lead to SQL injection.

CVEs:

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3482
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3483