CVE-2022-21831 in Active Storage

Sumário (Inglês)

A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

10/12/2021

Divulgação

26/05/2022

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
200814	Active Storage Elevação de Privilégios	94	Não definido	Não definido	CVE-2022-21831

Fontes

• MITRE
• NVD
• CVE Details