Cpe:2.3:a:ruby_on_rails:action_pack:*:*:*:*:*:*:*:*

The Action Pack component in Ruby on Rails incorrectly handles the return value of the each_key method, which may allow attackers to bypass Active Model mass assignment protections.