Rails Active Storage RCE: Arbitrary File Write & Read
A critical vulnerability in Rails Active Storage's ImageMagick integration allows arbitrary file write and read, enabling potential lateral movement.
- Attackers can write and read arbitrary files on vulnerable Rails servers using Active Storage.
- Affected systems are Ruby on Rails applications utilizing Active Storage with ImageMagick integration.
- Patch Rails installations immediately to address the critical arbitrary file operation vulnerability.