News for hackers. Stuff that matters.
Re:A backdoor in the Ruby gem bootstrap-sass by newnewpdro on Saturday April 13, 2019 @03:00AM (#19651488)
It runs arbitrary ruby code supplied in the form of a cookie.

This means the backdoor is fully generic and nobody can describe the damage, if any, that has been done.

The only saving grace is the code will run with the privileges of the ruby interpreter, constrained to the process environment of same.

There are no comments on this comment yet.