Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-21831

A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

Description

A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a https://github.com/rails/rails

  • 7.0.2.3, 6.1.4.7, 6.0.4.7, 5.2.6.3affected

References