Tag: file read vulnerability

CSBadmin

Image uploads can leak Rails master keys through critical Active Storage bug

A CVSS 9.5 Rails Active Storage flaw lets unauthenticated attackers read arbitrary server files through crafted image uploads.