writeups.xyz / Pre-Auth RCE in Aspera Faspex: Case Guide for Auditing Ruby on Rails

Submitter : c2a

Date: 2 February 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Security Code Review
• Missing Authentication
• Insecure Deserialization

Programs :

• IBM

Authors :

• Maxwell Garrett (@TheGrandPew)
• Shubham Shah (@Infosec_au)

Link :
https://blog.assetnote.io/2023/02/02/pre-auth-rce-aspera-faspex/