Critical Rails Bug Threatens to Derail Vulnerable Servers
Opened
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.