Critical Rails Bug Threatens to Derail Vulnerable Servers
· darkreading.com · popularity 21/100 · 0 similar stories today · Cybersecurity (Technology & Consumer Electronics)
Read the original at darkreading.com →
Summary
An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
Found in: Dark Reading. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 1.