Critical Rails Bug Threatens to Derail Vulnerable Servers
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
- Vendor
- Ruby on Rails
- Product
- ImageMagick / Ghostscript / FFmpeg / libxml2
Why it ranks 8 (Routine)
- Reporting
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Dark Reading (darkreading.com)