Critical Rails bug could let attackers write and read files via uploaded images
CRITICAL · VULNERABILITYActive Storageredteam/daily · 1 source
- Severity
- Critical
- Sources
- 1
What happened
A serious flaw has been found in Rails, a popular tool for building websites. Attackers could use images uploaded to a site to write and read files they should not be able to access. This could give them a way to move further into the affected systems.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether your Rails applications use Active Storage with the ImageMagick integration.
- Watch for vendor advisories and apply the fixed Rails version once it is published, as the article gives no specific version.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Dark Reading
Who and what is in it
Products