writeups.xyz / Universal Deserialisation Gadget for Ruby 2.x-3.x

Submitter : c2a

Date: 7 January 2021

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• Security Code Review
• RCE

Programs :

• Ruby

Authors :

• William Bowling / Vakzz (@Wcbowling)

Link :
https://devcraft.io/2021/01/07/universal-deserialisation-gadget-for-ruby-2-x-3-x.html