Skip to content
Marshal madness: A brief history of Ruby deserialization exploits
blog.trailofbits.com | research | #ruby | #deserialization | #vulnerabilities | #trail-of-bits | #marshal | #exploits | #gadget-chain | #vulnerability-history | #gadget-chains | #security-history
Summary
A decade-long history of Ruby Marshal deserialization exploits shows researchers repeatedly bypassing patches, arguing for fundamental ecosystem changes rather than a patch-and-hope approach.
- Published
- Collected