CVE-2012-2661

CVE-2012-2661 describes a SQL injection vulnerability in the Active Record component of Ruby on Rails versions 3.0.x, 3.1.x, and 3.2.x. This flaw allows remote attackers to execute SQL injection attacks by manipulating nested query parameters, leveraging unintended recursion. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, potentially leading to information disclosure. There is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or Nuclei, though it has received some community discussion.