CVE-2012-6497

score

<0.1

cvss

5.0

epss

2.7%

published

2013-01-04

kev added

—

first seen

2026-10-21

Authlogic gem for Ruby on Rails < 3.2.10 contains a SQL injection caused by unsafe find_by_id method calls, letting remote attackers execute arbitrary SQL commands via crafted parameters in environments with a known secret_token, exploit requires environment with secret_token value.