Ransack Library’s Search and Sort Feature Puts Ruby on Rails Applications at Risk of Information Theft | Black Hat Ethical Hacking

27/01/2023
676

Ransack is a popular library that allows developers to add object-based search to their Rails applications. However, its convenience and flexibility has led to security issues.By default, Ransack supports query conditions for associated objects and also provides useful commands that can be appended to field names to filter results with operators such as ‘starts with’ or ‘contains’.However, this feature can enable malicious actors to easily traverse domains to reach backend database systems.
Ransack Library’s Search and Sort Feature Puts Ruby on Rails Applications at Risk of Information Theft | Black Hat Ethical Hacking #ruby #rubydeveloper #rubyonrails #applications #library’s #search https://rubyonrails.ba/single/ransack-library-s-search-and-sort-feature-puts-ruby-on-rails-applications-at-risk-of-information-theft-black-hat-ethical-hacking