Rails patches critical Active Storage flaw with RCE potential

By Bill Toulas

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]

Read full article at BleepingComputer

More from BleepingComputer

"City-Forum" data-theft attacks target Salesforce, ServiceNow portals 7 hours ago Android malware combo takes out loans and relays victims' credit cards 8 hours ago Hackers exploit critical Adobe Commerce flaw to hijack customer accounts 9 hours ago Hundreds of fake Chrome VPN extensions route traffic through a proxy 11 hours ago Plug and Pwn attack uses fake USB devices for Windows SYSTEM access 14 hours ago