News for hackers. Stuff that matters.

A comment on Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3. Parent comment

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by postmodern_mod3 on Tuesday January 29, 2013 @07:28PM (#5137338)
Took a while to write a new blog post. Still, CVE-2013-0333 relies on the same YAML deserialization technique as CVE-2013-0156, so all the previous information is still relevant.
[ Parent | on HN ]

There are no comments on this comment yet.