Shopify · Report #1400309
[https://shipit-sox-staging.shopifycloud.com] Presence of multiple vulnerabilities present in Ruby On Rails
Validstatus
17upvotes
16 Apr 2022disclosed
How it was found
https://shipit-sox-staging.shopifycloud.com seems to be running 6.0.0 < rails < 6.0.3.2 which is prone to multiple vulnerabilities via csrf including open redirect, xss & rce as reported at https://hackerone.com/reports/904059
Impact
presence of multiple vulnerabilities can cause wide variety of damage.