Description
A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters.
Remediation
References
Related Vulnerabilities
Oracle Database Server Incorrect Authorization Vulnerability (CVE-2025-30750)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.38)
WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)
SharePoint CVE-2023-36764 Vulnerability (CVE-2023-36764)
Dolibarr Incorrect Authorization Vulnerability (CVE-2022-0731)