3 ms·
It requires skilled security researchers to unearth this? <?xml version="1.0" encoding="UTF-8"?> <bang type="yaml">--- !ruby/object:Time {} </bang>
by aerolite 14y ago
It requires skilled security researchers to unearth this?
<?xml version="1.0" encoding="UTF-8"?>
<bang type="yaml">--- !ruby/object:Time {}
</bang>
- techpeace 14y agoWhen the execution path looks like this, yes: http://blog.codeclimate.com/blog/2013/01/10/rails-remote-code-execution-vulnerability-explained/ http://blog.codeclimate.com/blog/2013/01/10/rails-remote-cod... An exploit that's simple to use does not mean that it was simple to discover. In fact, the opposite is often the case.