Ransack Library’s Search and Sort Feature Puts Ruby on Rails Applications at Risk of Information Theft | Black Hat Ethical Hacking
27-Jan-2023 906
Ransack is a popular library that allows developers to add object-based search to their Rails applications. However, its convenience and flexibility has led to security issues.By default, Ransack supports query conditions for associated objects and also provides useful commands that can be appended to field names to filter results with operators such as ‘starts with’ or ‘contains’.However, this feature can enable malicious actors to easily traverse domains to reach backend database systems.
Ransack Library’s Search and Sort Feature Puts Ruby on Rails Applications at Risk of Information Theft | Black Hat Ethical Hacking #ruby #rubydeveloper #rubyonrails #Ransack #Library’s #Search #Feature #Rails #Applications #Information #Theft #Black #Ethical #Hacking #applications #library’s #search https://rubyonrails.ba/link/ransack-library-s-search-and-sort-feature-puts-ruby-on-rails-applications-at-risk-of-information-theft-black-hat-ethical-hacking
