Post

Thomas Spooks 🎃👻💀
@thomasfuchs.at

If you have a Rails app, please address this immediately, it's possibly the worst security issue in years. github.com/rails/rails/...

github.comPossible arbitrary file read and remote code execution in Active Storage variant processing### Impact In its default configuration, a Rails application that displays image variants may allow an unauthenticated attacker to read arbitrary files from the server, including the process envi...

13 reposts18 likes

No replies yet.