Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Command Injection

🗓️ 03 Sep 2025 09:26:04Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 8 Views

ActiveStorage is vulnerable to command injection from unsafe image transformation defaults.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		BountySkiller
30 Jul 202619:32
–githubexploit
attackerkb
ATTACKERKB		CVE-2025-24293
30 Jan 202620:11
–attackerkb
cgr
Chainguard		CVE-2025-24293 vulnerabilities
2 Feb 202613:17
–cgr
circl
Circl		CVE-2025-24293
29 Oct 202513:31
–circl
cnnvd
CNNVD		Active Storage security vulnerability
30 Jan 202600:00
–cnnvd
cve
CVE		CVE-2025-24293
30 Jan 202620:11
–cve
cvelist
Cvelist		CVE-2025-24293
30 Jan 202620:11
–cvelist
debian
Debian		[SECURITY] [DLA 4416-1] rails security update
26 Dec 202516:16
–debian
debian
Debian		[SECURITY] [DSA 6090-1] rails security update
21 Dec 202515:51
–debian
debiancve
Debian CVE		CVE-2025-24293
30 Jan 202620:11
–debiancve
Rows per page
Vulners
Node
OR
activestorageactivestorageRange8.0.0.beta1–8.0.2ruby
activestorageactivestorageRange7.2.0.beta1–7.2.2.1ruby
activestorageactivestorageRange5.2.0.beta1–7.1.5.1ruby
activestorageactivestorageMatch8.0.0ruby
activestorageactivestorageMatch8.0.0.1ruby
activestorageactivestorageMatch8.0.1ruby
activestorageactivestorageMatch7.2.0ruby
activestorageactivestorageMatch7.2.1ruby
activestorageactivestorageMatch7.2.1.1ruby
activestorageactivestorageMatch7.2.1.2ruby
activestorageactivestorageMatch7.2.2ruby
activestorageactivestorageMatch5.2.0ruby
activestorageactivestorageMatch5.2.1ruby
activestorageactivestorageMatch5.2.1.1ruby
activestorageactivestorageMatch5.2.1.rc1ruby
activestorageactivestorageMatch5.2.2ruby
activestorageactivestorageMatch5.2.2.1ruby
activestorageactivestorageMatch5.2.2.rc1ruby
activestorageactivestorageMatch5.2.3ruby
activestorageactivestorageMatch5.2.3.rc1ruby
activestorageactivestorageMatch5.2.4ruby
activestorageactivestorageMatch5.2.4.1ruby
activestorageactivestorageMatch5.2.4.2ruby
activestorageactivestorageMatch5.2.4.3ruby
activestorageactivestorageMatch5.2.4.4ruby
activestorageactivestorageMatch5.2.4.5ruby
activestorageactivestorageMatch5.2.4.6ruby
activestorageactivestorageMatch5.2.4.rc1ruby
activestorageactivestorageMatch5.2.5ruby
activestorageactivestorageMatch5.2.6ruby
activestorageactivestorageMatch5.2.6.1ruby
activestorageactivestorageMatch5.2.6.2ruby
activestorageactivestorageMatch5.2.6.3ruby
activestorageactivestorageMatch5.2.7ruby
activestorageactivestorageMatch5.2.7.1ruby
activestorageactivestorageMatch5.2.8ruby
activestorageactivestorageMatch5.2.8.1ruby
activestorageactivestorageMatch6.0.0ruby
activestorageactivestorageMatch6.0.0.beta1ruby
activestorageactivestorageMatch6.0.0.beta2ruby
activestorageactivestorageMatch6.0.0.beta3ruby
activestorageactivestorageMatch6.0.0.rc1ruby
activestorageactivestorageMatch6.0.0.rc2ruby
activestorageactivestorageMatch6.0.1ruby
activestorageactivestorageMatch6.0.1.rc1ruby
activestorageactivestorageMatch6.0.2ruby
activestorageactivestorageMatch6.0.2.1ruby
activestorageactivestorageMatch6.0.2.2ruby
activestorageactivestorageMatch6.0.2.rc1ruby
activestorageactivestorageMatch6.0.2.rc2ruby
activestorageactivestorageMatch6.0.3ruby
activestorageactivestorageMatch6.0.3.1ruby
activestorageactivestorageMatch6.0.3.2ruby
activestorageactivestorageMatch6.0.3.3ruby
activestorageactivestorageMatch6.0.3.4ruby
activestorageactivestorageMatch6.0.3.5ruby
activestorageactivestorageMatch6.0.3.6ruby
activestorageactivestorageMatch6.0.3.7ruby
activestorageactivestorageMatch6.0.3.rc1ruby
activestorageactivestorageMatch6.0.4ruby
activestorageactivestorageMatch6.0.4.1ruby
activestorageactivestorageMatch6.0.4.2ruby
activestorageactivestorageMatch6.0.4.3ruby
activestorageactivestorageMatch6.0.4.4ruby
activestorageactivestorageMatch6.0.4.5ruby
activestorageactivestorageMatch6.0.4.6ruby
activestorageactivestorageMatch6.0.4.7ruby
activestorageactivestorageMatch6.0.4.8ruby
activestorageactivestorageMatch6.0.5ruby
activestorageactivestorageMatch6.0.5.1ruby
activestorageactivestorageMatch6.0.6ruby
activestorageactivestorageMatch6.0.6.1ruby
activestorageactivestorageMatch6.1.0ruby
activestorageactivestorageMatch6.1.0.rc1ruby
activestorageactivestorageMatch6.1.0.rc2ruby
activestorageactivestorageMatch6.1.1ruby
activestorageactivestorageMatch6.1.2ruby
activestorageactivestorageMatch6.1.2.1ruby
activestorageactivestorageMatch6.1.3ruby
activestorageactivestorageMatch6.1.3.1ruby
activestorageactivestorageMatch6.1.3.2ruby
activestorageactivestorageMatch6.1.4ruby
activestorageactivestorageMatch6.1.4.1ruby
activestorageactivestorageMatch6.1.4.2ruby
activestorageactivestorageMatch6.1.4.3ruby
activestorageactivestorageMatch6.1.4.4ruby
activestorageactivestorageMatch6.1.4.5ruby
activestorageactivestorageMatch6.1.4.6ruby
activestorageactivestorageMatch6.1.4.7ruby
activestorageactivestorageMatch6.1.5ruby
activestorageactivestorageMatch6.1.5.1ruby
activestorageactivestorageMatch6.1.6ruby
activestorageactivestorageMatch6.1.6.1ruby
activestorageactivestorageMatch6.1.7ruby
activestorageactivestorageMatch6.1.7.1ruby
activestorageactivestorageMatch6.1.7.10ruby
activestorageactivestorageMatch6.1.7.2ruby
activestorageactivestorageMatch6.1.7.3ruby
activestorageactivestorageMatch6.1.7.4ruby
activestorageactivestorageMatch6.1.7.5ruby
activestorageactivestorageMatch6.1.7.6ruby
activestorageactivestorageMatch6.1.7.7ruby
activestorageactivestorageMatch6.1.7.8ruby
activestorageactivestorageMatch6.1.7.9ruby
activestorageactivestorageMatch7.0.0ruby
activestorageactivestorageMatch7.0.0.alpha1ruby
activestorageactivestorageMatch7.0.0.alpha2ruby
activestorageactivestorageMatch7.0.0.rc1ruby
activestorageactivestorageMatch7.0.0.rc2ruby
activestorageactivestorageMatch7.0.0.rc3ruby
activestorageactivestorageMatch7.0.1ruby
activestorageactivestorageMatch7.0.2ruby
activestorageactivestorageMatch7.0.2.1ruby
activestorageactivestorageMatch7.0.2.2ruby
activestorageactivestorageMatch7.0.2.3ruby
activestorageactivestorageMatch7.0.2.4ruby
activestorageactivestorageMatch7.0.3ruby
activestorageactivestorageMatch7.0.3.1ruby
activestorageactivestorageMatch7.0.4ruby
activestorageactivestorageMatch7.0.4.1ruby
activestorageactivestorageMatch7.0.4.2ruby
activestorageactivestorageMatch7.0.4.3ruby
activestorageactivestorageMatch7.0.5ruby
activestorageactivestorageMatch7.0.5.1ruby
activestorageactivestorageMatch7.0.6ruby
activestorageactivestorageMatch7.0.7ruby
activestorageactivestorageMatch7.0.7.1ruby
activestorageactivestorageMatch7.0.7.2ruby
activestorageactivestorageMatch7.0.8ruby
activestorageactivestorageMatch7.0.8.1ruby
activestorageactivestorageMatch7.0.8.2ruby
activestorageactivestorageMatch7.0.8.3ruby
activestorageactivestorageMatch7.0.8.4ruby
activestorageactivestorageMatch7.0.8.5ruby
activestorageactivestorageMatch7.0.8.6ruby
activestorageactivestorageMatch7.0.8.7ruby
activestorageactivestorageMatch7.1.0ruby
activestorageactivestorageMatch7.1.0.beta1ruby
activestorageactivestorageMatch7.1.0.rc1ruby
activestorageactivestorageMatch7.1.0.rc2ruby
activestorageactivestorageMatch7.1.1ruby
activestorageactivestorageMatch7.1.2ruby
activestorageactivestorageMatch7.1.3ruby
activestorageactivestorageMatch7.1.3.1ruby
activestorageactivestorageMatch7.1.3.2ruby
activestorageactivestorageMatch7.1.3.3ruby
activestorageactivestorageMatch7.1.3.4ruby
activestorageactivestorageMatch7.1.4ruby
activestorageactivestorageMatch7.1.4.1ruby
activestorageactivestorageMatch7.1.4.2ruby
activestorageactivestorageMatch7.1.5ruby

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Jul 2026 05:50Current
7.6High risk
Vulners AI Score7.6
CVSS 3.18.1
CVSS 49.2
EPSS0.02388
SSVC
command injectionimage transformationsunsafe defaultsActiveStorage
8