CVE-2013-0276

CVE-2013-0276 describes a vulnerability in ActiveRecord within Ruby on Rails versions before 2.3.17, 3.1.11, and 3.2.12. This flaw allows remote attackers to bypass the attr_protected mechanism, enabling unauthorized modification of protected model attributes through crafted requests. The vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity and a potential impact on integrity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.