Rails 2.3.11 (CVE-2013-0156)