Ruby on Rails JSON Parser Crafted Payload YAML Subset Decoding Remote Code Execution

lalithr95 / invoice-app

Mainly gives users access to creating invoices and maintaining without any pen and paper

MIT License

1 stars 0 forks source link

Ruby on Rails JSON Parser Crafted Payload YAML Subset Decoding Remote Code Execution #110

Open apifuzzer opened 7 years ago

apifuzzer commented 7 years ago

Package : activesupport
Version : 3.0.0
Patched Versions : ~> 2.3.16 or >= 3.0.20
Safe Versions :
CVE : 2013-0333
URL : http://osvdb.org/show/osvdb/89594
Disclosure date : 2013-01-28
cc: @lalithr95

apifuzzer commented 7 years ago

Reference: lalithr95/Inline-chat#