Deserialization issues also affect Ruby, not just Java, PHP, and .NET

guest · Nov 10, 2018

Deserialization issues also affect Ruby, not just Java, PHP, and .NET
November 10, 2018
https://www.zdnet.com/article/deserialization-issues-also-affect-ruby-not-just-java-php-and-net/

AND NOW, RUBY, TOO.
But, this week, security researchers from elttam, an Australian IT security firm, have also discovered that Ruby-based apps are also vulnerable to serialization/deserialization attacks.

The serialization/deserialization issues --regardless of the programming language-- are a combination of vulnerable code but also bad coding practices on behalf of developers, who fail to recognize that serialized data is not necessarily secure by default and should be trusted when deserialized.

Fixing this would require having sanitizing user input before serializing it and then limiting a deserialized data's access to certain functions to prevent malicious code from having its way with a server.
Click to expand...

Log in or Sign up

Deserialization issues also affect Ruby, not just Java, PHP, and .NET

guest Guest

Log in or Sign up

Deserialization issues also affect Ruby, not just Java, PHP, and .NET

guest Guest

Useful Searches