mpgn Rails-doubletap-RCE issues

mpgn / Rails-doubletap-RCE

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

134 stars 28 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Bump globalid from 0.4.2 to 1.0.1 in /demo-5.2.1

#29 dependabot[bot] opened 1 year ago
0
Bump rails-html-sanitizer from 1.0.4 to 1.4.4 in /demo-5.2.1

#28 dependabot[bot] opened 1 year ago
0
Bump loofah from 2.2.3 to 2.19.1 in /demo-5.2.1

#27 dependabot[bot] opened 1 year ago
0
Bump addressable from 2.6.0 to 2.8.1 in /demo-5.2.1

#26 dependabot[bot] opened 2 years ago
0
Bump tzinfo from 1.2.5 to 1.2.10 in /demo-5.2.1

#25 dependabot[bot] opened 2 years ago
0
Bump rails-html-sanitizer from 1.0.4 to 1.4.3 in /demo-5.2.1

#24 dependabot[bot] closed 1 year ago
1
Bump puma from 3.12.1 to 4.3.12 in /demo-5.2.1

#23 dependabot[bot] opened 2 years ago
0
Bump puma from 3.12.1 to 4.3.11 in /demo-5.2.1

#22 dependabot[bot] closed 2 years ago
1
Bump puma from 3.12.1 to 4.3.9 in /demo-5.2.1

#21 dependabot[bot] closed 2 years ago
1
Bump nokogiri from 1.10.1 to 1.12.5 in /demo-5.2.1

#20 dependabot[bot] opened 3 years ago
0
Bump addressable from 2.6.0 to 2.8.0 in /demo-5.2.1

#19 dependabot[bot] closed 2 years ago
1
Bump nokogiri from 1.10.1 to 1.11.4 in /demo-5.2.1

#18 dependabot[bot] closed 3 years ago
1
Bump puma from 3.12.1 to 4.3.8 in /demo-5.2.1

#17 dependabot[bot] closed 3 years ago
1
Update from yanked version to unyanked versions

#16 alanyee opened 3 years ago
0
Bump rack from 2.0.6 to 2.2.3 in /demo-5.2.1

#15 dependabot[bot] opened 4 years ago
0
Bump websocket-extensions from 0.1.3 to 0.1.5 in /demo-5.2.1

#14 dependabot[bot] opened 4 years ago
0
Removed unused variable and library

#13 alanyee opened 4 years ago
0
Bump puma from 3.12.1 to 3.12.4 in /demo-5.2.1

#12 dependabot[bot] closed 3 years ago
1
Bump rake from 12.3.2 to 13.0.1 in /demo-5.2.1

#11 dependabot[bot] opened 4 years ago
0
Bump puma from 3.12.1 to 3.12.3 in /demo-5.2.1

#10 dependabot[bot] closed 4 years ago
1
Bump nokogiri from 1.10.1 to 1.10.8 in /demo-5.2.1

#9 dependabot[bot] closed 3 years ago
1
Bump rack from 2.0.6 to 2.1.2 in /demo-5.2.1

#8 dependabot[bot] closed 4 years ago
1
Bump rubyzip from 1.2.2 to 1.3.0 in /demo-5.2.1

#7 dependabot[bot] opened 4 years ago
0
Bump nokogiri from 1.10.1 to 1.10.7 in /demo-5.2.1

#6 dependabot[bot] closed 4 years ago
1
Bump puma from 3.12.1 to 3.12.2 in /demo-5.2.1

#5 dependabot[bot] closed 4 years ago
1
Bump loofah from 2.2.3 to 2.4.0 in /demo-5.2.1

#4 dependabot[bot] closed 1 year ago
1
Your Ruby version is 2.5.3, but your Gemfile specified 2.5.1

#3 XaFF-XaFF closed 3 years ago
0
Unable to start demo app

#2 romanianstrife opened 5 years ago
5
Fixed typo

#1 jasnow closed 5 years ago
2