Mittel 4.3Linux-Server
CVE-2026-126074
activestorage: activestorage: Denial of Service via filenames containing null bytes
activestorage
### Impact `ActiveStorage::Filename#base` and `#extension_with_delimiter`, and therefore `#extension`, pass the stored filename unmodified to `File.basename` and `File.extname`, which raise `ArgumentError` when the name contains a NUL byte. Active Storage stores the client-supplied filename verbatim, so a user who is permitted to upload an attachment could persist such a filename on databases that accept NUL bytes in string columns, such as SQLite and MySQL/MariaDB. Each…
10. Nov 2026
Original bei Red Hat öffnen