Lucene search
+L

201 matches found

FreeBSD
FreeBSD
added 2012/08/21 12:00 a.m.34 views

ruby -- $SAFE escaping vulnerability about Exception#to_s/NameError#to_s

The official ruby site reports: Vulnerabilities found for Exceptiontos, NameErrortos, and nameerrmesgtos which is Ruby interpreter-internal API. A malicious user code can bypass $SAFE check by utilizing one of those security holes. Ruby's $SAFE mechanism enables untrusted user codes to run in $SA...

5CVSS7.1AI score0.02619EPSS
SaveExploits1References2
Rows per page
Query Builder