writeups.xyz / Universal RCE with Ruby YAML.load

Submitter : c2a

Date: 2 March 2019

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE

Programs :

• Undisclosed

Authors :

• Etienne Stalmans (@_Staaldraad)

Link :
https://staaldraad.github.io/post/2019-03-02-universal-rce-ruby-yaml-load/