#activestorage

Cyber Security News4d agocritical

Critical Ruby on Rails Flaw Lets Hackers Steal Server Secrets Through Malicious Image Uploads

Unauthenticated image uploads via Active Storage can read and write server files in default ImageMagick setups; fixed in Rails 8.0.5.2 and 8.1.4.1 with a security policy.