4 ms·
discussed §2.5, and widely known http://guides.rubyonrails.org/security.html http://guides.rubyonrails.org/security.html [edit] should be widely known. I wou
by gtani 13y ago
discussed §2.5, and widely known
http://guides.rubyonrails.org/security.html http://guides.rubyonrails.org/security.html
[edit] should be widely known. I would say it took me a couple hours to read the majority of the security doc at a shallow level) and I wouldn't have known about this unless i had just started upgrading a 2.3 app.
(tho i can't find a .gitignore for it
https://github.com/fortuity/rails3-gitignore https://github.com/fortuity/rails3-gitignore
https://github.com/github/gitignore/blob/master/Rails.gitignore https://github.com/github/gitignore/blob/master/Rails.gitign...
- deleted 13y ago[deleted]
- thibaut_barrere 13y agoMoving out of the CookieStore also covers against this, apparently (see the twitter link I posted here).
- thibaut_barrere 13y agoAs a freelance doing fireman maintenance on Rails apps from time to time, I can tell that the word is not out enough, yet (far from it). The guides do not underline that you can do RCE, either! There is a metasploit module available now. https://twitter.com/unixmonkey/status/360859127620182017 https://twitter.com/unixmonkey/status/360859127620182017 https://github.com/joernchen/metasploit-framework/blob/7f3eccd64453c3708ad4cb7ed7a6ea18354bac3d/modules/exploits/multi/http/rails_secret_deserialization.rb https://github.com/joernchen/metasploit-framework/blob/7f3ec...
- gtani 13y agoare you talking about RCE more current than http://blog.codeclimate.com/blog/2013/01/10/rails-remote-code-execution-vulnerability-explained/ http://blog.codeclimate.com/blog/2013/01/10/rails-remote-cod... https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/61bkgvnSGTQ https://groups.google.com/forum/?fromgroups=#!topic/rubyonra... (patched in 3.2.11)
- thibaut_barrere 13y agosee the commit message, it seems to work for Rails 3 and 4: https://github.com/joernchen/metasploit-framework/commit/7f3eccd64453c3708ad4cb7ed7a6ea18354bac3d https://github.com/joernchen/metasploit-framework/commit/7f3...