I came across following link:http://weblog.rubyonrails.org/2013/3/18/SEC-ANN-Rails-3-2-13-3-1-12-and-2-3-18-have-been-released/
which says rails vulnerabilities issue has been fixed in 3.2.13
However I could see another link which says Rails 3.2.13 has induced Performance Regressions and Major Bugs.
I am still not certain for upgrading to 3.2.13.
Please let me know.
Farukh D M