Serious flaw in Ruby on Rails could give access to server files

A critical 9.8-rated vulnerability in Ruby on Rails (GHSA-f3w6-w445-fwh9) allows unauthenticated attackers to write arbitrary files via ImageMagick file uploads.

Applications utilizing Active Storage Disk service may also expose sensitive credentials, risking remote code execution.

Rails has shipped fixes in versions 8.1.4.1 and 8.0.5.2.

How did the problem work?

The issue concerns the way files uploaded by users are handled in an application. Specifically, if a website uses the ImageMagick image editor and accepts files from strangers, an attacker could upload a specially crafted image and force the system to write or read files that should not normally be accessible.

If the app stores uploaded files locally on the hard drive, the risk is greater. In this case, someone could potentially read sensitive digital keys and codes that the app uses to communicate with other systems, which could give them control of the system.

Who is affected and the solutions

The issue affects applications that meet certain conditions: they use the specified image editor, accept files from users without verification, and have security settings that do not prevent such actions. The issue was discovered by a researcher and reported via the relevant platform.

↳

READ ALSO

HACKS.GR / RELATED

Vulnerabilities & Security Updates

Google fixes serious issue in Android 14 to 17 that allowed remote intervention

↗

The platform's creators released versions 8.1.4.1 and 8.0.5.2, which fix the issue by adding a new security policy for ImageMagick. The same versions also fixed a separate issue related to file management.

Officials recommend installing the new updates immediately and implementing alternative solutions, such as copying security rules to the system for older versions.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr