Description
A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ocean Extra Security Bypass (1.5.8)
WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Security Bypass (3.5.4)
WordPress Plugin Usernoise modal feedback/contact form Cross-Site Scripting (3.7.8)
WordPress Plugin Tera Charts Multiple Local File Inclusion Vulnerabilities (0.1)