Free Certified Patch for Critical Rails Active Storage Vulnerability
Ruby on Rails has released security updates addressing 21 vulnerabilities, including a critical Active Storage flaw that could allow unauthenticated attackers to write arbitrary files to a server through crafted uploads. Under certain configurations, attackers may also be able to read sensitive files, potentially leading to remote code execution.
Summary from Socket Blog.
Explained
The technology and terms in this story. Learn more
Related coverage
Other sources covering the same vulnerabilities or event.
