Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Command Injection

🗓️ 03 Sep 2025 09:26:04Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 1 Views

ActiveStorage is vulnerable to command injection from unsafe image transformation defaults.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB		CVE-2025-24293
30 Jan 202620:11
–attackerkb
Chainguard		CVE-2025-24293 vulnerabilities
2 Feb 202613:17
–cgr
Circl		CVE-2025-24293
29 Oct 202513:31
–circl
CNNVD		Active Storage security vulnerability
30 Jan 202600:00
–cnnvd
CVE		CVE-2025-24293
30 Jan 202620:11
–cve
Cvelist		CVE-2025-24293
30 Jan 202620:11
–cvelist
Debian		[SECURITY] [DLA 4416-1] rails security update
26 Dec 202516:16
–debian
Debian		[SECURITY] [DSA 6090-1] rails security update
21 Dec 202515:51
–debian
Debian CVE		CVE-2025-24293
30 Jan 202620:11
–debiancve
Tenable Nessus		Debian dla-4416 : rails - security update
26 Dec 202500:00
–nessus
Rows per page
Vulners
Node
activestorageactivestorageRange8.0.0.beta1–8.0.2ruby
OR
activestorageactivestorageRange7.2.0.beta1–7.2.2.1ruby
OR
activestorageactivestorageRange5.2.0.beta1–7.1.5.1ruby
OR
activestorageactivestorageMatch8.0.0ruby
OR
activestorageactivestorageMatch8.0.0.1ruby
OR
activestorageactivestorageMatch8.0.1ruby
OR
activestorageactivestorageMatch7.2.0ruby
OR
activestorageactivestorageMatch7.2.1ruby
OR
activestorageactivestorageMatch7.2.1.1ruby
OR
activestorageactivestorageMatch7.2.1.2ruby
OR
activestorageactivestorageMatch7.2.2ruby
OR
activestorageactivestorageMatch5.2.0ruby
OR
activestorageactivestorageMatch5.2.1ruby
OR
activestorageactivestorageMatch5.2.1.1ruby
OR
activestorageactivestorageMatch5.2.1.rc1ruby
OR
activestorageactivestorageMatch5.2.2ruby
OR
activestorageactivestorageMatch5.2.2.1ruby
OR
activestorageactivestorageMatch5.2.2.rc1ruby
OR
activestorageactivestorageMatch5.2.3ruby
OR
activestorageactivestorageMatch5.2.3.rc1ruby
OR
activestorageactivestorageMatch5.2.4ruby
OR
activestorageactivestorageMatch5.2.4.1ruby
OR
activestorageactivestorageMatch5.2.4.2ruby
OR
activestorageactivestorageMatch5.2.4.3ruby
OR
activestorageactivestorageMatch5.2.4.4ruby
OR
activestorageactivestorageMatch5.2.4.5ruby
OR
activestorageactivestorageMatch5.2.4.6ruby
OR
activestorageactivestorageMatch5.2.4.rc1ruby
OR
activestorageactivestorageMatch5.2.5ruby
OR
activestorageactivestorageMatch5.2.6ruby
OR
activestorageactivestorageMatch5.2.6.1ruby
OR
activestorageactivestorageMatch5.2.6.2ruby
OR
activestorageactivestorageMatch5.2.6.3ruby
OR
activestorageactivestorageMatch5.2.7ruby
OR
activestorageactivestorageMatch5.2.7.1ruby
OR
activestorageactivestorageMatch5.2.8ruby
OR
activestorageactivestorageMatch5.2.8.1ruby
OR
activestorageactivestorageMatch6.0.0ruby
OR
activestorageactivestorageMatch6.0.0.beta1ruby
OR
activestorageactivestorageMatch6.0.0.beta2ruby
OR
activestorageactivestorageMatch6.0.0.beta3ruby
OR
activestorageactivestorageMatch6.0.0.rc1ruby
OR
activestorageactivestorageMatch6.0.0.rc2ruby
OR
activestorageactivestorageMatch6.0.1ruby
OR
activestorageactivestorageMatch6.0.1.rc1ruby
OR
activestorageactivestorageMatch6.0.2ruby
OR
activestorageactivestorageMatch6.0.2.1ruby
OR
activestorageactivestorageMatch6.0.2.2ruby
OR
activestorageactivestorageMatch6.0.2.rc1ruby
OR
activestorageactivestorageMatch6.0.2.rc2ruby
OR
activestorageactivestorageMatch6.0.3ruby
OR
activestorageactivestorageMatch6.0.3.1ruby
OR
activestorageactivestorageMatch6.0.3.2ruby
OR
activestorageactivestorageMatch6.0.3.3ruby
OR
activestorageactivestorageMatch6.0.3.4ruby
OR
activestorageactivestorageMatch6.0.3.5ruby
OR
activestorageactivestorageMatch6.0.3.6ruby
OR
activestorageactivestorageMatch6.0.3.7ruby
OR
activestorageactivestorageMatch6.0.3.rc1ruby
OR
activestorageactivestorageMatch6.0.4ruby
OR
activestorageactivestorageMatch6.0.4.1ruby
OR
activestorageactivestorageMatch6.0.4.2ruby
OR
activestorageactivestorageMatch6.0.4.3ruby
OR
activestorageactivestorageMatch6.0.4.4ruby
OR
activestorageactivestorageMatch6.0.4.5ruby
OR
activestorageactivestorageMatch6.0.4.6ruby
OR
activestorageactivestorageMatch6.0.4.7ruby
OR
activestorageactivestorageMatch6.0.4.8ruby
OR
activestorageactivestorageMatch6.0.5ruby
OR
activestorageactivestorageMatch6.0.5.1ruby
OR
activestorageactivestorageMatch6.0.6ruby
OR
activestorageactivestorageMatch6.0.6.1ruby
OR
activestorageactivestorageMatch6.1.0ruby
OR
activestorageactivestorageMatch6.1.0.rc1ruby
OR
activestorageactivestorageMatch6.1.0.rc2ruby
OR
activestorageactivestorageMatch6.1.1ruby
OR
activestorageactivestorageMatch6.1.2ruby
OR
activestorageactivestorageMatch6.1.2.1ruby
OR
activestorageactivestorageMatch6.1.3ruby
OR
activestorageactivestorageMatch6.1.3.1ruby
OR
activestorageactivestorageMatch6.1.3.2ruby
OR
activestorageactivestorageMatch6.1.4ruby
OR
activestorageactivestorageMatch6.1.4.1ruby
OR
activestorageactivestorageMatch6.1.4.2ruby
OR
activestorageactivestorageMatch6.1.4.3ruby
OR
activestorageactivestorageMatch6.1.4.4ruby
OR
activestorageactivestorageMatch6.1.4.5ruby
OR
activestorageactivestorageMatch6.1.4.6ruby
OR
activestorageactivestorageMatch6.1.4.7ruby
OR
activestorageactivestorageMatch6.1.5ruby
OR
activestorageactivestorageMatch6.1.5.1ruby
OR
activestorageactivestorageMatch6.1.6ruby
OR
activestorageactivestorageMatch6.1.6.1ruby
OR
activestorageactivestorageMatch6.1.7ruby
OR
activestorageactivestorageMatch6.1.7.1ruby
OR
activestorageactivestorageMatch6.1.7.10ruby
OR
activestorageactivestorageMatch6.1.7.2ruby
OR
activestorageactivestorageMatch6.1.7.3ruby
OR
activestorageactivestorageMatch6.1.7.4ruby
OR
activestorageactivestorageMatch6.1.7.5ruby
OR
activestorageactivestorageMatch6.1.7.6ruby
OR
activestorageactivestorageMatch6.1.7.7ruby
OR
activestorageactivestorageMatch6.1.7.8ruby
OR
activestorageactivestorageMatch6.1.7.9ruby
OR
activestorageactivestorageMatch7.0.0ruby
OR
activestorageactivestorageMatch7.0.0.alpha1ruby
OR
activestorageactivestorageMatch7.0.0.alpha2ruby
OR
activestorageactivestorageMatch7.0.0.rc1ruby
OR
activestorageactivestorageMatch7.0.0.rc2ruby
OR
activestorageactivestorageMatch7.0.0.rc3ruby
OR
activestorageactivestorageMatch7.0.1ruby
OR
activestorageactivestorageMatch7.0.2ruby
OR
activestorageactivestorageMatch7.0.2.1ruby
OR
activestorageactivestorageMatch7.0.2.2ruby
OR
activestorageactivestorageMatch7.0.2.3ruby
OR
activestorageactivestorageMatch7.0.2.4ruby
OR
activestorageactivestorageMatch7.0.3ruby
OR
activestorageactivestorageMatch7.0.3.1ruby
OR
activestorageactivestorageMatch7.0.4ruby
OR
activestorageactivestorageMatch7.0.4.1ruby
OR
activestorageactivestorageMatch7.0.4.2ruby
OR
activestorageactivestorageMatch7.0.4.3ruby
OR
activestorageactivestorageMatch7.0.5ruby
OR
activestorageactivestorageMatch7.0.5.1ruby
OR
activestorageactivestorageMatch7.0.6ruby
OR
activestorageactivestorageMatch7.0.7ruby
OR
activestorageactivestorageMatch7.0.7.1ruby
OR
activestorageactivestorageMatch7.0.7.2ruby
OR
activestorageactivestorageMatch7.0.8ruby
OR
activestorageactivestorageMatch7.0.8.1ruby
OR
activestorageactivestorageMatch7.0.8.2ruby
OR
activestorageactivestorageMatch7.0.8.3ruby
OR
activestorageactivestorageMatch7.0.8.4ruby
OR
activestorageactivestorageMatch7.0.8.5ruby
OR
activestorageactivestorageMatch7.0.8.6ruby
OR
activestorageactivestorageMatch7.0.8.7ruby
OR
activestorageactivestorageMatch7.1.0ruby
OR
activestorageactivestorageMatch7.1.0.beta1ruby
OR
activestorageactivestorageMatch7.1.0.rc1ruby
OR
activestorageactivestorageMatch7.1.0.rc2ruby
OR
activestorageactivestorageMatch7.1.1ruby
OR
activestorageactivestorageMatch7.1.2ruby
OR
activestorageactivestorageMatch7.1.3ruby
OR
activestorageactivestorageMatch7.1.3.1ruby
OR
activestorageactivestorageMatch7.1.3.2ruby
OR
activestorageactivestorageMatch7.1.3.3ruby
OR
activestorageactivestorageMatch7.1.3.4ruby
OR
activestorageactivestorageMatch7.1.4ruby
OR
activestorageactivestorageMatch7.1.4.1ruby
OR
activestorageactivestorageMatch7.1.4.2ruby
OR
activestorageactivestorageMatch7.1.5ruby

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Feb 2026 17:40Current
7.6High risk
Vulners AI Score7.6
CVSS 49.2
EPSS0.00178
SSVC
command injectionimage transformationsunsafe defaultsActiveStorage
1