Blog

SQL Injection Vulnerability in Ruby on Rails

Team Avatar - Mikel Lindsaar
Mikel Lindsaar
March 1, 2013

At around 8:30am today a security update was released for all released versions of Ruby on Rails. All previously released versions of Rails are vulnerable to this issue.

The best way to address a situation like this is to upgrade your application to the most recent “patch level” version of Rails. This means updating your site with all the new upgrades and security patches that have been released since your application went live - including fixing today’s issue.

We have contacted all out clients advising them to upgrade. If you have a Rails Application you should upgrade as soon as possible. If you require help for this, please get in touch with us and we can get this done for you rapidly.