CVE-2013-0277

score

<0.1

cvss

10.0

epss

7.5%

published

2013-02-13

kev added

—

first seen

2026-10-21

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 contains a remote code execution and denial of service caused by deserialization of crafted YAML in serialized attributes, letting attackers execute arbitrary code or cause denial of service, exploit requires sending malicious serialized data.