Lucene search
+L

1 matches found

RubySec
RubySec
added 2024/03/12 12:0 a.m.31 views

StimulusReflex arbitrary method call

Summary More methods than expected can be called on reflex instances. Being able to call some of them has security implications. Details To invoke a reflex a websocket message of the following shape is sent: json "target": "classnamemethodname", "args": The server will proceed to instantiate refl...

8.8CVSS7AI score0.01555EPSS
SaveExploits3References1Affected Software1
Rows per page
Query Builder