User hacks GitHub to showcase vulnerability after Rails developers dismiss his report

By | March 5, 2012

Source: Computerworld

by Lucian Constantin

In this article “A user hacked into the official GitHub-hosted Ruby on Rails code repository and bug tracker on Sunday in order to show the Rails development team how serious a vulnerability was.

Ruby on Rails, commonly referred to as Rails, is an increasingly popular Web application development framework for the Ruby programming language, whose goal is to allow developers to focus on building applications rather than understanding what goes on under the hood.

One of the most popular Web services built using Rails is GitHub, a large code hosting and collaborative development platform, which also hosts the official code repository and bug tracker of the Ruby on Rails project.

Last Thursday, a Russian user named Egor Homakov reported a Rails vulnerability that could be exploited to insert unauthorized data into a Rails’ application database through Web forms, much like in the case of SQL injection.”

Leave a Reply