---
id: 4015
title: "Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/ruby-vulnerabilities-exploits"
published_at: "2022-05-17T00:00:00Z"
tags: ["rce", "ruby-on-rails", "ruby", "web-security", "deserialization", "exploit-development"]
phying_url: "https://phying.com/item/4015"
lang: en
---

# Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations

## Summary

A walkthrough of three common Ruby-specific remote code execution bugs exploiting dangerous open, send, and deserialization operations in a Ruby on Rails application, with exploit examples.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2022-05-17T00:00:00Z
- **Original:** https://bishopfox.com/blog/ruby-vulnerabilities-exploits
- **Phying News:** https://phying.com/item/4015