VDB

GCVE-110-CERTCC-2013-628463

GCVE-110-CERTCC-2013-628463
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published January 28, 2013
The Ruby on Rails 3.0 and 2.3 JSON parser contain a vulnerability that may result in arbitrary code execution.
Download JSON Open in Console

Risk Scores

CVSS 2.0
8.8/10
High · AV:N/AC:M/Au:N/C:C/I:C/A:N
certcc-vrda
certcc-vrda
d1_impact4d1_population4d1_direct_report0
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7.7remediation_levelOFreport_confidenceCenvironmental_score6.1target_distributionMenvironmental_vectorCDP:MH/TD:M/CR:H/IR:H/AR:L

Aliases

CVE-2013-0333

References

Ruby on Rails 3.0 and 2.3 JSON Parser vulnerability
url
Ruby on Rails 3.0 and 2.3 JSON Parser vulnerability
url
Ruby on Rails 3.0 and 2.3 JSON Parser vulnerability
advisory

Browse GCVE Records

74,147 records in the GCVE database · Updated July 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›