Tag: CVSS 9.5

CSBadmin

Image uploads can leak Rails master keys through critical Active Storage bug

A CVSS 9.5 Rails Active Storage flaw lets unauthenticated attackers read arbitrary server files through crafted image uploads.