Artículo
en
Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads
Fuente: The Hacker News ·
A critical flaw in Ruby on Rails could allow an unauthenticated attacker to write arbitrary files on an app's server by uploading a crafted file if the app processes uploads using ImageMagick. The Rails project disclosed the flaw in an advisory and fixed it in versions 8.1.4.1 and 8.0.5.2. The flaw is in Active Storage, the part of Rails that handles file uploads. Some apps store
Más como esto
-
SpaceX signs multi-year Qualcomm deal for tens of thousands of 5G sites
Artículo · The Next Web
-
Huawei tells some clients to source their own HBM, report says
Artículo · The Next Web
-
Brava secures $15M to help security teams find threats their systems miss
Artículo · The Next Web
-
UK cyber agency warns of AI-powered ransomware on infrastructure by 2028
Artículo · The Next Web
-
Crédit Mutuel Arkéa says hackers carried out fraudulent transactions
Artículo · The Next Web
-
ElevenLabs could start preparing for an IPO in 2028, its CEO says
Artículo · The Next Web