Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/05/07 4:58 a.m.25 views

Ruby: RCE by parsing `.rdoc_options` in RDoc

The Ruby RDoc library was vulnerable to remote code execution due to improper parsing of the .rdocoptions configuration file. When the RDoc command was executed, the library attempted to load the YAML-formatted .rdocoptions file, which allowed for the instantiation of arbitrary classes and the...

4.5CVSS8AI score0.01571EPSS
SaveExploits0
Rows per page
Query Builder