Rubyonrails Active Storage vulnerabilities

1 known vulnerability affecting rubyonrails/active_storage.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-21831CRITICALCVSS 9.8≥ 5.2.0, < 5.2.6.3≥ 6.0.0, < 6.0.4.7+2 more2022-05-26

CVE-2022-21831 [CRITICAL] CWE-94 CVE-2022-21831: A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker t A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.