LEARN HOW UNSAFE DESERIALIZATION VULNERABILITIES WORK IN RUBY

Summary from the TLDR InfoSec newsletter

An in-depth blog post from GitHub that explores how unsafe deserialization vulnerabilities manifest in Ruby and works through the process of creating a gadget chain to detect unsafe deserialization vulnerabilities in the Oj library. The post breaks down how the universal deserialization gadget for Marshal works and how it can be adapted to the Oj and other deserialization libraries. It then extends the gadget chain that they create to achieve RCE using the zip command and lists the vulnerable sinks that CodeQL uses to detect unsafe deserialization vulnerabilities.