Rails Active Storage flaw allows possible arbitrary file write and read
VULNERABILITYActive Storageredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A flaw has been found in a part of the Rails web framework that handles uploaded files, specifically when it analyses images. Someone exploiting it could potentially write and read files they should not be able to access. Website operators using Rails should apply the fixed updates.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Upgrade Rails Active Storage to 8.0.5.2 or later if you run the 8.0 branch.
- Upgrade Rails Active Storage to 8.1.4.1 or later if you run the 8.1 branch.
- Review the linked Rails 8.0.5.2 and 8.1.4.1 release notes.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security
Who and what is in it
Companies
Products