Ruby on Rails has released fixes for a critical Active Storage vulnerability that could let unauthenticated attackers read arbitrary files from application servers through crafted image uploads. Tracked as CVE202666066 CVSS score 9.5, the flaw can expose the Rails process environment and secrets such as secretkeybase, the Rails master key, database passwords, cloud storage credentials,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity