6.5Mittel
Unsafe Reflection in Mongoid::Criteria.from_hash
MongoDB Inc MongoDB Ruby Driver
Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.from_hash may allow for executing arbitrary Ruby code.