Critical Rails Bug Threatens to Derail Vulnerable Servers

An at­tac­ker could write ar­bi­trary files and read sen­si­ti­ve files via ima­ges uploa­ded to the Rails Ac­ti­ve Sto­ra­ge Ima­ge­Ma­gick in­te­gra­tion, pos­sibly po­si­tio­ning a th­reat actor for la­te­ral mo­ve­ment.