[michaelfairley]

This affects all versions of Rails, not just 3.x.

This is a really, really bad hole, and you should patch or upgrade ASAP.

[danso]

Thanks, fixed the headline. All versions are affected, only 3.1, 3.2 have official support