CVE-2013-1854

score

<0.1

cvss

5.0

epss

3.5%

published

2013-03-19

kev added

—

first seen

2026-10-21

Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 contain a denial of service caused by processing certain queries with hash keys converted to symbols, letting remote attackers cause denial of service via crafted input to a where method, exploit requires sending malicious queries.