Product
The Action Pack component in Ruby on Rails incorrectly handles the return value of the each_key method, which may allow attackers to bypass Active Model mass assignment protections.