#Rails

Unauthenticated attackers can execute arbitrary code through malicious image uploads in Rails Active Storage

A critical flaw in Rails Active Storage allows unauthenticated attackers to read sensitive files and execute arbitrary code via crafted image uploads.