Serious Security Vulenrability in RoR: bypass authentication systems, inject arbitrary SQL, inject and execute arbitrary code, or perform a DoS attack on a Rails application.

[Ashish V. Thapliyal]

Hi all,

    Just came across this serious RoR vulnerability.  Thought I'd pass it along...

https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion

https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156?x=1

Regards,

Ashish.