An attacker could write arbitrary files and read sensitive files via images uploaded to the Rails Active Storage ImageMagick integration, possibly positioning a threat actor for lateral movement.
First seen on darkreading.com
Jump to article: www.darkreading.com/application-security/critical-rails-bug-derail-vulnerable-servers
