Lucene search
+L

2 matches found

RubySec
RubySec
added 2024/03/15 12:00 a.m.19 views

TurboBoost Commands vulnerable to arbitrary method invocation

Impact TurboBoost Commands has existing protections in place to guarantee that only public methods on Command classes can be invoked; however, the existing checks aren't as robust as they should be. It's possible for a sophisticated attacker to invoke more methods than should be permitted dependi...

8.1CVSS7.5AI score0.00796EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder