Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2020/05/14 6:46 p.m.25 views

GitLab: Use of Ruby Forwardable module and runtime meta-programming may introduce vulnerabilities

I was digging through the gitlab-foss repository and noticed an interested pattern that seems to be adopted in a few places: the use of Forwardable with meta-programming over delegators, explicit attrreader methods or methodmissing. Heads up: the arbitrary file read vulnerability I demonstrate in...

7.4AI score
SaveExploits0
Rows per page
Query Builder