{"uuid": "030939f7-2783-42e9-b72d-9cf642b75825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-3224", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_web_console_v2_code_exec.rb", "content": "{\"aliases\": [], \"arch\": \"ruby\", \"author\": [\"joernchen \", \"Ben Murphy \", \"hdm \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an IP whitelist bypass vulnerability in the developer\\n          web console included with Ruby on Rails 4.0.x and 4.1.x. This module will also\\n          achieve code execution on Rails 4.2.x if the attack is launched from a\\n          whitelisted IP range.\", \"disclosure_date\": \"2015-06-16\", \"fullname\": \"exploit/multi/http/rails_web_console_v2_code_exec\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Ruby on Rails Web Console (v2) Whitelist Bypass Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/rails_web_console_v2_code_exec.rb\", \"platform\": \"Ruby\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/rails_web_console_v2_code_exec\", \"references\": [\"CVE-2015-3224\", \"URL-http://openwall.com/lists/oss-security/2015/06/16/18\", \"URL-https://groups.google.com/forum/message/raw?msg=rubyonrails-security/lzmz9_ijUFw/HBMPi4zp5NAJ\", \"URL-https://hackerone.com/reports/44513\"], \"rport\": 3000, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:10.774949Z"}