A new universal Ruby deserialization attack chain has been released that achieves command execution on Ruby 4.0.6, the most recent version, and works unchanged as far back as Ruby 3.3.
log in to read full article
the world wide web for retro machines
A new universal Ruby deserialization attack chain has been released that achieves command execution on Ruby 4.0.6, the most recent version, and works unchanged as far back as Ruby 3.3.
log in to read full article