Ruby on Rails critical file write flaw via ImageMagick
A critical vulnerability in Ruby on Rails Active Storage allows unauthenticated attackers to write arbitrary files to an app server by uploading a crafted file processed by ImageMagick. Rails 8.1.4.1 and 8.0.5.2 patch the flaw. Applications using file uploads with ImageMagick processing should update immediately or disable file upload functionality.