Skip to content
Threat Feed
Subscribe

Tag

Active_storage

1 brief RSS
high advisory

Rails Active Storage Vulnerability Allows Arbitrary File Deletion

A vulnerability in Rails Active Storage allows attackers to delete arbitrary files in the storage directory by exploiting glob metacharacters in blob keys passed to `Dir.glob`.

Active Storage rails active_storage file_deletion vulnerability
2r 1t