HexBrain

Shopify · Report #1400309

[https://shipit-sox-staging.shopifycloud.com] Presence of multiple vulnerabilities present in Ruby On Rails

Validstatus
17upvotes
16 Apr 2022disclosed

How it was found

https://shipit-sox-staging.shopifycloud.com seems to be running 6.0.0 < rails < 6.0.3.2 which is prone to multiple vulnerabilities via csrf including open redirect, xss & rce as reported at https://hackerone.com/reports/904059

Impact

presence of multiple vulnerabilities can cause wide variety of damage.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original