RCE due to Web Console IP Whitelist bypass in Rails 4.0 and 4.1

代码执行 / 代码注入 / #44513

厂商

Ruby on Rails

严重程度

未评级

赏金

—

弱点

代码注入

研究员

@joernchen

披露日期

2015-06-16

资产

—

CVE

—

该报告还没有中文解读。

With the release of Ruby on Rails 4.2 the so called [Web Console](https://github.com/rails/web-console) was introduced.