CVE-2014-3483

score

<0.1

cvss

7.5

epss

4.2%

published

2014-07-07

kev added

—

first seen

2026-10-21

Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 contain a sql_injection caused by improper range quoting in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb, letting remote attackers execute arbitrary SQL commands, exploit requires sending malicious range input.