Active Storage
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by Cyber Security NewsCritical Ruby on Rails Active Storage flaw lets attackers access server files via crafted image uploads
- Vulnerability reported by The Hacker NewsCritical Ruby on Rails flaw lets attackers write server files via crafted ImageMagick uploads
Recent news
Critical Ruby on Rails Active Storage flaw lets attackers access server files via crafted image uploads
Rails Active Storage passes uploads to ImageMagick, which chooses its file handler based on file contents and can act on other files named inside an image. Unauthenticated users can trigger file writes, and file reads where the Disk service is used, by attaching a crafted upload, with a CVSS score of 9.8. Fixed releases are activestorage 8.0.5.2 and 8.1.4.1, and the fix ships an ImageMagick policy that blocks the risky coders.
Critical Ruby on Rails flaw lets attackers write server files via crafted ImageMagick uploads
A critical unauthenticated file-write flaw affects Ruby on Rails apps that process uploads through Active Storage with ImageMagick. A crafted upload can write arbitrary files on the server. The Rails project has fixed it in versions 8.1.4.1 and 8.0.5.2.