Open Intel60
CriticalVulnerability

Ruby on Rails critical file write flaw via ImageMagick

A critical vulnerability in Ruby on Rails Active Storage allows unauthenticated attackers to write arbitrary files to an app server by uploading a crafted file processed by ImageMagick. Rails 8.1.4.1 and 8.0.5.2 patch the flaw. Applications using file uploads with ImageMagick processing should update immediately or disable file upload functionality.

Sources

AI-written summary. Check the original reporting before acting.