CVEs-PoC/2020/CVE-2020-8165.md

### [CVE-2020-8165](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8165)
![](https://img.shields.io/static/v1?label=Product&message=https%3A%2F%2Fgithub.com%2Frails%2Frails&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Deserialization%20of%20Untrusted%20Data%20(CWE-502)&color=brighgreen)

### Description

A deserialization of untrusted data vulnernerability exists in rails < 5.2.4.3, rails < 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in MemCacheStore and RedisCacheStore potentially resulting in an RCE.

### POC

#### Reference
- https://hackerone.com/reports/413388

#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/0xsyr0/OSCP
- https://github.com/ARPSyndicate/cvemon
- https://github.com/AssassinUKG/CVE-2020-8165
- https://github.com/danielklim/cve-2020-8165-demo
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/dpredrag/Plaid-test
- https://github.com/dpredrag/olain-test2
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/hybryx/CVE-2020-8165
- https://github.com/macosta-42/Exploit-Development
- https://github.com/masahiro331/CVE-2020-8165
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/progfay/CVE-2020-8165
- https://github.com/soosmile/POC
- https://github.com/taipansec/CVE-2020-8165
- https://github.com/umiterkol/CVE-2020-8165--Auto-Shell