Ruby on Rails flaw lets unauthenticated attackers write server files through crafted uploads
Rails versions before 8.0.5.2 and 8.1.4.1 are affected when applications accept untrusted uploads and use ImageMagick through Active Storage. Rails recommends upgrading as soon as possible; its advisory does not say whether attackers have exploited the flaw.