The Ruby on Rails vulnerability that made Metasploit release a patch
A January 8 post to the Ruby on Rails Security group described how crafted user-provided YAML and Symbol data could inject arbitrary SQL, inject and execute arbitrary code, and cause denial of service in Rails applications, assigned CVE-2013-0156....