3 ms·
Is there any more info about the severity of this attack? Is this a drop-everything issue? What are the vulnerable endpoints (reading between the lines implies
by cschneid 14y ago
Is there any more info about the severity of this attack? Is this a drop-everything issue? What are the vulnerable endpoints (reading between the lines implies password resets?).
- josevalim 14y ago"Upgrade immediately" so do drop everything. I have amended the blog post to mention an attacker could gain control of other accounts.
- cschneid 14y agoThanks. Is there a firewall level rule we can use to block requests (in addition to updating rails itself). We have a ton of apps to update, so a catchall rule would be very helpful.