rails-lts/json_cve_2020_10663

PoC

Workaround for CVE-2020-10663 (vulnerability in json gem)

view exploit source poc_in_githubauthor rails-ltspublished 2020-03-24catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-10663US	high7.5	6.81% (94th)	Exploit	2020-04-28
The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.