3 ms·
if you can control session hash it may also be possible to execute arbitrary ruby code. if you take an object from the session hash and call a method on it then
by benmmurphy 14y ago
if you can control session hash it may also be possible to execute arbitrary ruby code. if you take an object from the session hash and call a method on it then depending on the method name it is possible to eval arbitrary ruby code.