Skip to content
OpenAdvisories

Package · RubyGems

activestorage

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-8162 Public exploit

    Circumvention of file size limits in ActiveStorage

    A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user bypassing upload limits.

    rails rails activestorage Debian Ubuntu RubyGems