CVE-2013-0333
lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for...
- Published
- Jan 30, 2013
- Updated
- Aug 6, 2024
- Assigning CNA
- redhat
- Evidence observed
- Jan 29, 2013
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:PHigh · next 30 days
- Percentile
- 99.9%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
lib/active_support/json/backends/yaml.rb in Ruby on Rails 2.3.x before 2.3.16 and 3.0.x before 3.0.20 does not properly convert JSON data to YAML data for processing by a YAML parser, which allows remote attackers to execute arbitrary code, conduct SQL injection attacks, or bypass authentication via crafted data that triggers unsafe decoding, a different vulnerability than CVE-2013-0156.
Sources
modules/auxiliary/scanner/http/rails_json_yaml_scanner.rb
Metasploit Framework modulesDeclared conditions
- verification: check_not_declared($.auxiliary_scanner/http/rails_json_yaml_scanner.check)
modules/exploits/multi/http/rails_json_yaml_code_exec.rb
Metasploit Framework modulesDeclared conditions
- platform: Ruby($.exploit_multi/http/rails_json_yaml_code_exec.platform)
- verification: check_not_declared($.exploit_multi/http/rails_json_yaml_code_exec.check)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.