writeups.xyz / Ruby Deserialization - Gadget on Rails

Submitter : c2a

Date: 28 March 2022

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE

Programs :

• Ruby on Rails

Authors :

• HTTPVoid (@Httpvoid0x2f)

Link :
https://httpvoid.com/Ruby-Deserialization-Gadget-On-Rails.md