Debian/rails: medium 5.3
Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arbitrary metadata from the client
Action: Upgrade rails to 2:6.1.7.10+dfsg-1~deb12u3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:6.1.7.10+dfsg-1~deb12u3 | - |
Fixed versions
| 2:6.1.7.10+dfsg-1~deb12u3 |
Sources
published · modified · JSON