tag: Active-Storage · 1 items
- Engineer — Plan: Arbitrary file write by unauthenticated attackers is severe, but no KEV listing, public PoC, or exploitation signals are present. Patch Rails to 8.1.4.1 (Rails 8.1.x) or 8.0.5.2 (Rails 8.0.x) this sprint if your app uses Active Storage with ImageMagick processing.
- SOC/IR — Skip
- Leader — Skip