As cited
Copy frozen at (site build).
vulnerabilities
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical vulnerability in Ruby on Rails Active Storage allows unauthenticated attackers to write arbitrary files to a server by uploading a crafted file processed through ImageMagick. The Rails project released patches in versions 8.1.4.1 and 8.0.5.2 to address the flaw.
Why it matters: Rails applications using Active Storage with ImageMagick processing are at risk of remote code execution and server compromise; administrators should upgrade immediately to the patched versions.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
A critical vulnerability in Ruby on Rails Active Storage allows unauthenticated attackers to write arbitrary files to a server by uploading a crafted file processed through ImageMagick. The Rails project released patches in versions 8.1.4.1 and 8.0.5.2 to address the flaw.
Why it matters: Rails applications using Active Storage with ImageMagick processing are at risk of remote code execution and server compromise; administrators should upgrade immediately to the patched versions.
- Source published
- First seen by Cybersecurity Tracker