CVE-2013-0269

CVE-2013-0269 is a critical vulnerability affecting the JSON gem for Ruby, specifically versions before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7. This flaw, dubbed "Unsafe Object Creation Vulnerability," allows remote attackers to trigger denial of service or bypass mass assignment protection by crafting malicious JSON documents that create arbitrary Ruby symbols or internal objects, potentially leading to SQL injection in applications like Ruby on Rails. With a CVSS score of 7.5 (High), it presents a significant risk due to its network-based attack vector, low access complexity, and potential for partial impact on confidentiality, integrity, and availability. Despite its age and high risk score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.