GSD-2016-2098

Exploit Intelligence

• Proof of concept showing how CVE-2016-2098 leads to remote code execution (github-poc-repo)
• A PoC of CVE-2016-2098 (rails4.2.5.1 / view render) (github-poc-repo)
• Proof of concept CVE-2016-2098 (github-poc-repo)
• Ruby On Rails unrestricted render() exploit (github-poc-repo)
• 3rg1s/CVE-2016-2098 (github-poc-repo)
• CVE-2016-2098 simple POC written in bash (github-poc-repo)
• This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data (github-poc-repo)
• CVE-2016-2098 - POC of RCE Ruby on Rails: Improper Input Validation (CVE-2016-2098) in bash. Remote attackers can execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. (github-poc-repo)
• Remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. (github-poc-repo)
• CVE-2016-2098 POC (github-poc-repo)

…and 29 more exploits

Timeline

• Mar 1, 2016 CVE Published