CVEs-PoC/2020/CVE-2020-8165.md

CVE-2020-8165

Description

A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

POC

Reference

• https://hackerone.com/reports/413388

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/0xsyr0/OSCP
• https://github.com/ARPSyndicate/cvemon
• https://github.com/AssassinUKG/CVE-2020-8165
• https://github.com/danielklim/cve-2020-8165-demo
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/dpredrag/Plaid-test
• https://github.com/dpredrag/olain-test2
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/hybryx/CVE-2020-8165
• https://github.com/macosta-42/Exploit-Development
• https://github.com/masahiro331/CVE-2020-8165
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/progfay/CVE-2020-8165
• https://github.com/soosmile/POC
• https://github.com/taipansec/CVE-2020-8165
• https://github.com/umiterkol/CVE-2020-8165--Auto-Shell