4 matches found
Active Storage: Possible DoS vulnerability in Active Storage filename handling
Impact ActiveStorage::Filenamebase and extensionwithdelimiter, and therefore extension, pass the stored filename unmodified to File.basename and File.extname, which raise ArgumentError when the name contains a NUL byte. Active Storage stores the client-supplied filename verbatim, so a user who is...
4.3CVSS5.2AI score
SaveExploits0References7Affected Software1
20