Ruby on Rails Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Ruby on Rails. A remote user can generate unsafe queries, bypass authentication systems, inject SQL commands, inject and execute arbitrary code, and cause denial of service conditions.

1. A remote user can supply a specially crafted data to exploit an Active Record validation flaw and JSON parameter parsing bug to potentially issue unexpected database queries with "IS NULL" or empty where clauses.
2. The parameter parsing code does not properly cast values from strings to certain data types, which may allow a remote user to compromise a target Rails application.