CVE-2022-21831 in Active Storage
Résumé (Anglaise)
A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Réserver
10/12/2021
Divulgation
26/05/2022
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 200814 | Active Storage élévation de privilèges | 94 | Non défini | Non défini | CVE-2022-21831 |