Possible arbitrary file read and remote code execution in Active Storage
github.com