{
  "canonical_id": "rails--CVE-2011-0447",
  "system_id": "rails",
  "title": "CVE-2011-0447",
  "reasons": [
    "missing affected/fixed version details"
  ],
  "candidate_count": 1,
  "references": [
    "http://groups.google.com/group/rubyonrails-security/msg/c22ea1668c0d181c?dmode=source&output=gplain",
    "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html",
    "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html",
    "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html",
    "http://secunia.com/advisories/43274",
    "http://secunia.com/advisories/43666",
    "http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails",
    "http://www.debian.org/security/2011/dsa-2247",
    "http://www.securityfocus.com/bid/46291",
    "http://www.securitytracker.com/id?1025060",
    "http://www.vupen.com/english/advisories/2011/0587",
    "http://www.vupen.com/english/advisories/2011/0877"
  ]
}