CVE-2022-21831 in Active Storage
Summary
A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.
Reservation
12/10/2021
Disclosure
05/26/2022
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 200814 | Active Storage code injection | 94 | Not defined | Not defined | CVE-2022-21831 |