arbitrary-file-write

Preview image for a blog post

Critical Rails Active Storage Vulnerability: Arbitrary File R/W Threatens Server Integrity

Rails Active Storage ImageMagick bug allows arbitrary file read/write, enabling lateral movement and severe server compromise.