Threat Intelligence Database

In Rails versions prior to 7.2.3.2, 8.0.5.1, and 8.1.3.1, Active Storage does not disable unsafe libvips operations for untrusted content. This allows crafted image uploads to invoke unsafe operations. Applications using libvips and accepting uploads from untrusted users are vulnerable. An unauthenticated attacker can read arbitrary files accessible to the Rails process, including environment variables and secrets. Exposure of credentials like secret_key_base may lead to remote code execution or lateral movement. The issue is fixed in versions 7.2.3.2, 8.0.5.1, and 8.1.3.1.

Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 contain a patch.

Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#path_for` does not validate that the resolved filesystem path remains within the storage root directory. If a blob key containing path traversal sequences (e.g. `../`) is used, it could allow reading, writing, or deleting arbitrary files on the server. Blob keys are expected to be trusted strings, but some applications could be passing user input as keys and would be affected. Versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 contain a patch.

HighVulnerabilityUnited StatesUnited KingdomGermany+9#cve#cve-2026-33195#cwe-22

Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage (CVE-2024-26144) * rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing (CVE-2024-26146) * rubygem-rack: Possible DoS Vulnerability with Range Header in Rack (CVE-2024-26141) * rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing (CVE-2024-25126) * python-ecdsa: vulnerable to the Minerva attack (CVE-2024-23342) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.