ADVISORIES

• OSVDB-106279
• Vendor Advisory

GEM

jruby-sandbox

PLATFORM

JRuby

PATCHED VERSIONS

• >= 0.2.3

DESCRIPTION

jruby-sandbox contains a flaw that is triggered when importing Java Classes. This may allow a remote attacker to bypass the sandbox for code execution.

RELATED

• https://www.exploit-db.com/exploits/33028
• https://security.snyk.io/vuln/SNYK-RUBY-JRUBYSANDBOX-20156