3 ms·
Only seems to be working for servers not running 1.8.7. Our old app runs 1.8.7, is there a POC out for that?
by kawsper 14y ago
Only seems to be working for servers not running 1.8.7.
Our old app runs 1.8.7, is there a POC out for that?
- postmodern_mod3 14y ago@benmmurphy seems to be the only one who knows how to get RCE via Syck (1.8.x YAML parser). https://twitter.com/benmmurphy/status/296025302986014720 https://twitter.com/benmmurphy/status/296025302986014720
- rmc 14y agoDoesn't matter, upgrade. They won't always tell you if they have an exploit.