File Upload Vulnerability
Invincible News
Critical Rails Active Storage Flaw Allows Server File Writes
Rails patched a critical Active Storage flaw (CVSS 9.8) that lets crafted uploads write server files when ImageMagick is used. Upgrade and rotate secrets.