"I can confirm the existence of a remote code execution PoC for Rails."

by Fizzadar on 1/7/2013, 1:49 PM with 2 comments
  • by benmmurphy on 1/7/2013, 6:07 PM

    There has also been massive copy+pasta of the code in question and some other ruby frameworks / libraries are vulnerable as well.

  • by benmmurphy on 1/7/2013, 6:05 PM

    I have POC for Rails 2.x and 3.x. If you are running any version of Rails from the last 6 years you are vulnerable.