Ruby on Rails apps vulnerable to data theft through Ransack search

Poor integration of the Ransack library into Ruby on Rails (RoR) applications could allow attackers to steal information from backend databases, security firm Positive Security has warned.