activestorage vulnerabilities (RubyGems)
11 vulnerabilities.
-
activestorageRubyGems Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing 9.5 Critical -
activestorageRubyGems Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests 2.3 Low -
activestorageRubyGems Rails Active Storage has possible glob injection in its DiskService 6.6 Medium -
activestorageRubyGems Rails Active Storage has possible Path Traversal in DiskService 8.0 High -
activestorageRubyGems Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests 6.6 Medium -
activestorageRubyGems Rails Active Storage has possible content type bypass via metadata in direct uploads 5.3 Medium -
activestorageRubyGems Active Storage allowed transformation methods that were potentially unsafe 9.2 Critical -
activestorageRubyGems Possible Sensitive Session Information Leak in Active Storage 5.3 Medium -
activestorageRubyGems Possible code injection vulnerability in Rails / Active Storage 9.8 Critical -
activestorageRubyGems Circumvention of file size limits in ActiveStorage 7.5 High -
activestorageRubyGems Exposure of Sensitive Information to an Unauthorized Actor in activestorage 6.5 Medium