An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
Origine de l’article : lire l’article original
Critical Rails Bug Threatens to Derail Vulnerable Servers
Previous Article
Next Article
2032 : la dystopie où la protection remplace la liberté
Nintendo's biggest ROM chip supplier is bowing out of the business
