[olug] [OT] Remote Exploit Ruby on Rails Websites
Rob Townley
rob.townley at gmail.com
Wed Jan 9 13:52:10 UTC 2013
HDMoore of MetaSploit uses RubyOnRails and takes this exploit
seriously ... i do not think he slept last night judging by his
tweets.
Reminds me of how Internet Explorer would parse and act upon HTML in a
.txt file.
CVE-2013-0156
https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156
More information about the OLUG
mailing list