[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6QoDCqwQEF6vPSk1ix5NudKfRV_k2TsFyS8BW-M91OI":3,"g5a-risk:CVE-2013-0155":186},{"success":4,"data":5,"meta":184},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":46,"references":47,"referencesCount":118,"weaknesses":119,"weaknessesCount":123,"isActivelyExploited":124,"cisaInfo":15,"otxData":15,"relatedBlogPosts":125,"seoMetadata":126,"configurations":151,"relatedVendorCves":175,"notableEvents":176},"CVE-2013-0155","What is CVE-2013-0155?","Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2660 and CVE-2012-2694.","Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Acti...","2013-01-13T22:55:00.9","2025-04-11T00:51:21.963",6.4,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","MEDIUM",10,4.9,0.08245,[29,29,29,29,29,29,29],"Medium",[33,38,41],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"rubyonrails","rails","*","cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",{"vendor":34,"product":39,"version":36,"criteria":40,"vulnerable":4},"ruby_on_rails","cpe:2.3:a:rubyonrails:ruby_on_rails:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"debian","debian_linux","6.0","cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*",3,[48,54,59,63,66,69,72,76,79,82,86,90,94,96,98,100,102,104,106,108,110,112,114,116],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fics-cert.us-cert.gov\u002Fadvisories\u002FICSA-13-036-01A","Us-cert",[52,53],"Third Party Advisory","US Government Resource",{"url":55,"source":56,"tags":57},"http:\u002F\u002Flists.apple.com\u002Farchives\u002Fsecurity-announce\u002F2013\u002FJun\u002Fmsg00000.html","Apple",[58,52],"Mailing List",{"url":60,"source":61,"tags":62},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2013-12\u002Fmsg00079.html","Opensuse",[58,52],{"url":64,"source":61,"tags":65},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2013-12\u002Fmsg00081.html",[58,52],{"url":67,"source":61,"tags":68},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2013-12\u002Fmsg00082.html",[58,52],{"url":70,"source":61,"tags":71},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2014-01\u002Fmsg00003.html",[58,52],{"url":73,"source":74,"tags":75},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-0154.html","Red Hat",[52],{"url":77,"source":74,"tags":78},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-0155.html",[52],{"url":80,"source":56,"tags":81},"http:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT5784",[52],{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2013\u002Fdsa-2609","Debian",[52],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fgroups.google.com\u002Fgroup\u002Frubyonrails-security\u002Fmsg\u002Fbc6f13dafe130ee9?dmode=source&output=gplain","Google",[52],{"url":91,"source":92,"tags":93},"https:\u002F\u002Fpuppet.com\u002Fsecurity\u002Fcve\u002Fcve-2013-0155","Puppet",[52],{"url":49,"source":50,"tags":95},[52,53],{"url":55,"source":56,"tags":97},[58,52],{"url":60,"source":61,"tags":99},[58,52],{"url":64,"source":61,"tags":101},[58,52],{"url":67,"source":61,"tags":103},[58,52],{"url":70,"source":61,"tags":105},[58,52],{"url":73,"source":74,"tags":107},[52],{"url":77,"source":74,"tags":109},[52],{"url":80,"source":56,"tags":111},[52],{"url":83,"source":84,"tags":113},[52],{"url":87,"source":88,"tags":115},[52],{"url":91,"source":92,"tags":117},[52],24,[120],{"id":121,"name":121,"description":122},"Unknown","CWE-264",1,false,[],{"title":127,"metaDescription":128,"keywords":129,"canonicalUrl":130,"structuredData":131},"What is CVE-2013-0155? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2013-0155, a medium severity cyber security vulnerability from 2013. Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, an...","CVE-2013-0155, CVE-2013-0155 vulnerability, CVE-2013-0155 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2013, CVSS score, exploit, patch, remediation, rubyonrails security, debian security, rails vulnerability, ruby_on_rails vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2013-0155",{"@context":132,"@type":133,"headline":127,"description":128,"datePublished":10,"dateModified":11,"author":134,"publisher":138,"about":142,"mainEntityOfPage":146,"articleSection":149,"keywords":150},"https:\u002F\u002Fschema.org","TechArticle",{"@type":135,"name":136,"url":137},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":135,"name":136,"url":137,"logo":139},{"@type":140,"url":141},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":143,"name":6,"description":144,"additionalType":145},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":147,"@id":148},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2013-0155","Cybersecurity","CVE-2013-0155, CVE-2013-0155 vulnerability, CVE-2013-0155 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[152,169],{"Operator":15,"Negate":15,"Nodes":153},[154],{"Operator":155,"Negate":15,"CPEMatch":156},"OR",[157,161,165],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":159,"VersionEndExcluding":160,"VersionEndIncluding":15},"DF1D9248-14D7-4EA2-B416-D76FBA64E329","3.2.0","3.2.11",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":163,"VersionEndExcluding":164,"VersionEndIncluding":15},"BC513BC8-F945-46A9-A63F-22585232DAE8","3.0.0","3.0.19",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":167,"VersionEndExcluding":168,"VersionEndIncluding":15},"08C05EBE-B0D8-48F5-8C69-5801000189BA","3.1.0","3.1.10",{"Operator":15,"Negate":15,"Nodes":170},[171],{"Operator":155,"Negate":15,"CPEMatch":172},[173],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"036E8A89-7A16-411F-9D31-676313BB7244",[],[177],{"id":178,"eventType":179,"eventTime":180,"details":181,"label":182,"color":183},"2d8fdfeb-a8cf-4128-a408-edf455482e79","LOW_EPSS_DELTA","2026-06-16T04:06:49.227912+00:00","Daily EPSS score decreased by 0.125 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":185,"version":21},1792367782493,{"score":187,"band":188,"action":189,"scoredAt":190},29,"Low","Monitor","2026-10-17T06:39:18.050001+00:00"]