Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le avril 08, 2022, 19:00:49
-
Popular Ruby Asciidoc toolkit patched against critical vuln – get the update now!
A rogue line-continuation character can trick the code into validating just the second half of the line, but executing all of it.
Source: Popular Ruby Asciidoc toolkit patched against critical vuln – get the update now! (https://nakedsecurity.sophos.com/2022/04/08/popular-ruby-asciidoc-toolkit-patched-against-critical-vuln-get-the-update-now/)