Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript execution, and ImageMagick features. The research also exposed a separate cache poisoning flaw that could run JavaScript for anonymous visitors. Researchers reported both...