CERT24Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick UploadsLoading data…

Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

A critical vulnerability in Ruby on Rails Active Storage could allow an unauthenticated attacker to write arbitrary files on an application server when the application processes uploads with ImageMagick. Applications using the Disk service may also expose files that the application can read.

← Back to intelligence

Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads

A critical vulnerability in Ruby on Rails Active Storage could allow an unauthenticated attacker to write arbitrary files on an application server when the application processes uploads with ImageMagick. Applications using the Disk service may also expose files that the application can read.