CVE-2013-0333
Ruby on Rails 2.3.x-2.3.15 and 3.0.x-3.0.19 - Remote Code Execution via YAML Deserialization
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2013-0333.
PoCs published by Metasploit, heroku, jjarmoc, hdm, including Metasploit module auxiliary/scanner/http/rails_json_yaml_scanner.
AI-analyzed exploit summary This Metasploit module exploits a YAML deserialization vulnerability in Ruby on Rails (CVE-2013-0333) to achieve remote code execution by embedding malicious YAML in JSON requests. It targets Rails 2.x and 3.x by leveraging the `NamedRouteCollection` vector to execute arbitrary Ruby code.
Description
lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156.
Exploits (4)
This Metasploit module exploits a YAML deserialization vulnerability in Ruby on Rails (CVE-2013-0333) to achieve remote code execution by embedding malicious YAML in JSON requests. It targets Rails 2.x and 3.x by leveraging the `NamedRouteCollection` vector to execute arbitrary Ruby code.
This repository contains a Ruby script to scan Heroku applications for vulnerable Rails versions affected by CVE-2013-0333. It checks installed Rails versions against known vulnerable ranges (2.3.0-2.3.15 and 3.0.0-3.0.19) and reports affected apps.
This Metasploit module scans for Ruby on Rails instances vulnerable to CVE-2013-0156 by sending JSON and YAML probes to detect deserialization flaws. It checks for inconsistent response codes to identify potential vulnerabilities.
This Metasploit module exploits a YAML deserialization vulnerability in Ruby on Rails (CVE-2013-0333) to achieve remote code execution. It crafts malicious YAML payloads embedded in JSON requests, targeting Rails 2.x and 3.x applications.