A critical vulnerability within Ruby on Rails’ Active Storage component allows unauthenticated attackers to write arbitrary files to the server using crafted ImageMagick file uploads. Developers are strongly urged to update to patched versions 8.1.4.1 or 8.0.5.2 immediately to mitigate potential exploitation.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →