writeups.xyz / Airbnb – Ruby on Rails String Interpolation led to Remote Code Execution

Submitter : c2a

Date: 13 March 2017

Bounty : undisclosed

Vulnerabilities :

• RCE

Programs :

• Airbnb

Authors :

• Brett Buerhaus (@Bbuerhaus)
• Ben Sadeghipour (@Nahamsec)

Link :
https://buer.haus/2017/03/13/airbnb-ruby-on-rails-string-interpolation-led-to-remote-code-execution/