AS
Product
Active Storage
by Rubyonrails · last CVE May 26, 2022
1
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add Active Storage to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-21831
9.8
3%
May 26
A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments
Affected: 5.2.0 before 5.2.6.3; 6.0.0 before 6.0.4.7; 6.1.0 before 6.1.4.7; 7.0.0 before 7.0.2.3
Showing 1