CVE-2022-21831

CVE-2022-21831

Vendor N/A
Product https://github.com/rails/rails
Weakness CWE-94 · Code injection
Published May 26, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

Key dates

02Disclosure timeline

May 26, 2022 CVE published
August 3, 2024 Record updated