Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-21831 PoC — Ruby on Rails 代码注入漏洞

Source
https://github.com/usutani/study-turbolinks-link
Associated Vulnerability
Title:Ruby on Rails 代码注入漏洞 (CVE-2022-21831)
Description:Ruby on Rails是Rails团队的一套基于Ruby语言的开源Web应用框架。 Ruby on Rails 存在代码注入漏洞，该漏洞源于Active Storage模块存在输入验证不正确。远程攻击者可利用该漏洞发送专门设计的请求，并在目标系统上执行任意代码。
Description
Known security vulnerabilities detected. CVE-2022-21831 Critical severity CVE-2025-24293 Critical severity CVE-2020-8162 High severity CVE-2024-26144 Moderate severity
File Snapshot

 None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.