Multiple updates have been released for the Ruby on Rails web application framework, fixing a couple of security vulnerabilities that affected PostgreSQL. The two glitches that have been patched touched on the PostgreSQL adapter for Active Record and consisted in SQL injection. The two flaws are similar and by taking advantage of them an attacker would have the possibility to inject malicious SQL statements. One of the glitches made the bitstring quoting vulnerable to an attac…
Comments are closed.
