CVE-2022-21831 PoC — Ruby on Rails 代码注入漏洞

Source

https://github.com/usutani/study-turbolinks-link

Associated Vulnerability

Title: Ruby on Rails 代码注入漏洞 (CVE-2022-21831)
Description:A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

Description

Known security vulnerabilities detected. CVE-2022-21831 Critical severity CVE-2025-24293 Critical severity CVE-2020-8162 High severity CVE-2024-26144 Moderate severity

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →