Rails flaw lets attackers write files via ImageMagick uploads
Original title: Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Ruby on Rails Active Storage before 8.1.4.1 and 8.0.5.2 allows arbitrary file write and read of secrets via crafted uploads processed by ImageMagick.
A critical flaw in Ruby on Rails Active Storage allows unauthenticated attackers to write arbitrary files on the server by uploading a crafted file if the app uses ImageMagick for image processing. The flaw can also allow reading of sensitive files such as secret_key_base and credentials. Fixed in Rails 8.1.4.1 and 8.0.5.2. No known exploitation.
- CVSS score of 9.8
- GHSA-f3w6-w445-fwh9
- Affected when config.active_storage.variant_processor = :mini_magick
- Affects every Active Storage version before the fixed releases
Impact: arbitrary file write and read on server including secrets
- 1.Upgrade to Rails 8.1.4.1 or 8.0.5.2
- 2.Apply ImageMagick security policy to block MSL coder and related coders
- 3.Verify MiniMagick version is 5.1 or later
- Vendors
- Rails
- Products
- Active Storage
From the original article
5 min read at thehackernews.com
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8. 1.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.