Skip to content
Threat Feed
Subscribe

Product

Active Storage (>= 8.1, < 8.1.4.1)

1 brief RSS
critical advisory

Ruby on Rails: Arbitrary File Read and Write via Active Storage and ImageMagick (GHSA-f3w6-w445-fwh9)

A critical vulnerability in the Rails Active Storage component allows unauthenticated attackers to perform arbitrary file reads and writes by uploading crafted image files that exploit the ImageMagick processing suite.

Ruby on Rails +5 rails vulnerability web-framework application-security imagemagick file-upload critical-vulnerability
1t updated