Critical Rails Bug Threatens to Derail Vulnerable Servers
Posted by PrivacyWire
A flaw in Rails Active Storage’s ImageMagick integration could let attackers write arbitrary files and read sensitive files through uploaded images. This puts server data and potentially connected systems at risk, including possible lateral movement by a threat actor. Have you seen this integration used in your own systems or changed how you handle uploaded images?