Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/11/10 9:33 p.m.•5 views

Active Storage: Possible DoS vulnerability in Active Storage filename handling

Impact ActiveStorage::Filenamebase and extensionwithdelimiter, and therefore extension, pass the stored filename unmodified to File.basename and File.extname, which raise ArgumentError when the name contains a NUL byte. Active Storage stores the client-supplied filename verbatim, so a user who is...

4.3CVSS5.2AI score
SaveExploits0References7Affected Software1
Rows per page
Query Builder