{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-24293.json"
      }
    ],
    "title": "activestorage: Code injection in Active Storage when used in conjunction with the image_processing gem",
    "tracking": {
      "current_release_date": "2026-06-30T04:09:47+00:00",
      "generator": {
        "date": "2026-06-30T04:09:47+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "CVE-2025-24293",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2025-01-01T00:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-03-16T08:31:19+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-06-30T04:09:47+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat 3scale API Management Platform 2",
                "product": {
                  "name": "Red Hat 3scale API Management Platform 2",
                  "product_id": "red_hat_3scale_api_management_platform_2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:red_hat_3scale_amp:2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat 3scale API Management Platform 2"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Satellite 6",
                "product": {
                  "name": "Red Hat Satellite 6",
                  "product_id": "red_hat_satellite_6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:satellite:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Satellite 6"
          },
          {
            "category": "product_version",
            "name": "3scale-amp20/system",
            "product": {
              "name": "3scale-amp20/system",
              "product_id": "3scale-amp20/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp20/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp21/system",
            "product": {
              "name": "3scale-amp21/system",
              "product_id": "3scale-amp21/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp21/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp21/zync",
            "product": {
              "name": "3scale-amp21/zync",
              "product_id": "3scale-amp21/zync",
              "product_identification_helper": {
                "purl": "pkg:oci/zync?repository_url=registry.redhat.io/3scale-amp21/zync"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp22/system",
            "product": {
              "name": "3scale-amp22/system",
              "product_id": "3scale-amp22/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp22/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp22/zync",
            "product": {
              "name": "3scale-amp22/zync",
              "product_id": "3scale-amp22/zync",
              "product_identification_helper": {
                "purl": "pkg:oci/zync?repository_url=registry.redhat.io/3scale-amp22/zync"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp24/system",
            "product": {
              "name": "3scale-amp24/system",
              "product_id": "3scale-amp24/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp24/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp24/zync",
            "product": {
              "name": "3scale-amp24/zync",
              "product_id": "3scale-amp24/zync",
              "product_identification_helper": {
                "purl": "pkg:oci/zync?repository_url=registry.redhat.io/3scale-amp24/zync"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp25/system",
            "product": {
              "name": "3scale-amp25/system",
              "product_id": "3scale-amp25/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp25/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp25/zync",
            "product": {
              "name": "3scale-amp25/zync",
              "product_id": "3scale-amp25/zync",
              "product_identification_helper": {
                "purl": "pkg:oci/zync?repository_url=registry.redhat.io/3scale-amp25/zync"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp26/system",
            "product": {
              "name": "3scale-amp26/system",
              "product_id": "3scale-amp26/system",
              "product_identification_helper": {
                "purl": "pkg:oci/system?repository_url=registry.redhat.io/3scale-amp26/system"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp26/zync",
            "product": {
              "name": "3scale-amp26/zync",
              "product_id": "3scale-amp26/zync",
              "product_identification_helper": {
                "purl": "pkg:oci/zync?repository_url=registry.redhat.io/3scale-amp26/zync"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/system-rhel7",
            "product": {
              "name": "3scale-amp2/system-rhel7",
              "product_id": "3scale-amp2/system-rhel7",
              "product_identification_helper": {
                "purl": "pkg:oci/system-rhel7?repository_url=registry.redhat.io/3scale-amp2/system-rhel7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/system-rhel8",
            "product": {
              "name": "3scale-amp2/system-rhel8",
              "product_id": "3scale-amp2/system-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/system-rhel8?repository_url=registry.redhat.io/3scale-amp2/system-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/system-rhel9",
            "product": {
              "name": "3scale-amp2/system-rhel9",
              "product_id": "3scale-amp2/system-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/system-rhel9?repository_url=registry.redhat.io/3scale-amp2/system-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/zync-rhel7",
            "product": {
              "name": "3scale-amp2/zync-rhel7",
              "product_id": "3scale-amp2/zync-rhel7",
              "product_identification_helper": {
                "purl": "pkg:oci/zync-rhel7?repository_url=registry.redhat.io/3scale-amp2/zync-rhel7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/zync-rhel8",
            "product": {
              "name": "3scale-amp2/zync-rhel8",
              "product_id": "3scale-amp2/zync-rhel8",
              "product_identification_helper": {
                "purl": "pkg:oci/zync-rhel8?repository_url=registry.redhat.io/3scale-amp2/zync-rhel8"
              }
            }
          },
          {
            "category": "product_version",
            "name": "3scale-amp2/zync-rhel9",
            "product": {
              "name": "3scale-amp2/zync-rhel9",
              "product_id": "3scale-amp2/zync-rhel9",
              "product_identification_helper": {
                "purl": "pkg:oci/zync-rhel9?repository_url=registry.redhat.io/3scale-amp2/zync-rhel9"
              }
            }
          },
          {
            "category": "product_version",
            "name": "rubygem-activestorage.src",
            "product": {
              "name": "rubygem-activestorage.src",
              "product_id": "rubygem-activestorage.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/rubygem-activestorage?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "satellite:el8/rubygem-activestorage.src",
            "product": {
              "name": "satellite:el8/rubygem-activestorage.src",
              "product_id": "satellite:el8/rubygem-activestorage.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/rubygem-activestorage?arch=src&rpmmod=satellite:el8"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/system-rhel7 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7"
        },
        "product_reference": "3scale-amp2/system-rhel7",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/system-rhel8 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8"
        },
        "product_reference": "3scale-amp2/system-rhel8",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/system-rhel9 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9"
        },
        "product_reference": "3scale-amp2/system-rhel9",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/zync-rhel7 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel7"
        },
        "product_reference": "3scale-amp2/zync-rhel7",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/zync-rhel8 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel8"
        },
        "product_reference": "3scale-amp2/zync-rhel8",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp2/zync-rhel9 as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel9"
        },
        "product_reference": "3scale-amp2/zync-rhel9",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp20/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp20/system"
        },
        "product_reference": "3scale-amp20/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp21/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp21/system"
        },
        "product_reference": "3scale-amp21/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp21/zync as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp21/zync"
        },
        "product_reference": "3scale-amp21/zync",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp22/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp22/system"
        },
        "product_reference": "3scale-amp22/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp22/zync as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp22/zync"
        },
        "product_reference": "3scale-amp22/zync",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp24/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp24/system"
        },
        "product_reference": "3scale-amp24/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp24/zync as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp24/zync"
        },
        "product_reference": "3scale-amp24/zync",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp25/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp25/system"
        },
        "product_reference": "3scale-amp25/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp25/zync as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp25/zync"
        },
        "product_reference": "3scale-amp25/zync",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp26/system as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp26/system"
        },
        "product_reference": "3scale-amp26/system",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "3scale-amp26/zync as a component of Red Hat 3scale API Management Platform 2",
          "product_id": "red_hat_3scale_api_management_platform_2:3scale-amp26/zync"
        },
        "product_reference": "3scale-amp26/zync",
        "relates_to_product_reference": "red_hat_3scale_api_management_platform_2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rubygem-activestorage.src as a component of Red Hat Satellite 6",
          "product_id": "red_hat_satellite_6:rubygem-activestorage.src"
        },
        "product_reference": "rubygem-activestorage.src",
        "relates_to_product_reference": "red_hat_satellite_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "satellite:el8/rubygem-activestorage.src as a component of Red Hat Satellite 6",
          "product_id": "red_hat_satellite_6:satellite:el8/rubygem-activestorage.src"
        },
        "product_reference": "satellite:el8/rubygem-activestorage.src",
        "relates_to_product_reference": "red_hat_satellite_6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-24293",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')"
      },
      "discovery_date": "2026-01-30T21:01:14.441355+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/zync",
            "red_hat_satellite_6:rubygem-activestorage.src",
            "red_hat_satellite_6:satellite:el8/rubygem-activestorage.src"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2435565"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allowing for the circumvention of the safe defaults which enables potential command injection vulnerabilities in cases where arbitrary user supplied input is accepted as valid transformation methods or parameters. This vulnerability impacts applications that use Active Storage with the image_processing processing gem in addition to mini_magick as the image processor.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "activestorage: Code injection in Active Storage when used in conjunction with the image_processing gem",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The vulnerability is marked as Important since the exploitation is not possible in default Active Storage configurations and instead requires applications to improperly pass untrusted user input as image transformation methods or parameters.\n\nSince Red Hat products do not utilize configurations that meet the specific conditions required for exploitation, no Red Hat offerings are affected. These conditions include the use of Active Storage with the image_processing gem and MiniMagick, coupled with unsafe application logic that exposes transformation controls to users.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel7",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel8",
          "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel9",
          "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp21/zync",
          "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp22/zync",
          "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp24/zync",
          "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp25/zync",
          "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
          "red_hat_3scale_api_management_platform_2:3scale-amp26/zync",
          "red_hat_satellite_6:rubygem-activestorage.src",
          "red_hat_satellite_6:satellite:el8/rubygem-activestorage.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-24293"
        },
        {
          "category": "external",
          "summary": "RHBZ#2435565",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2435565"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-24293",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24293"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-24293",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24293"
        },
        {
          "category": "external",
          "summary": "https://github.com/advisories/GHSA-r4mg-4433-c7g3",
          "url": "https://github.com/advisories/GHSA-r4mg-4433-c7g3"
        }
      ],
      "release_date": "2026-01-30T20:11:15.219000+00:00",
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/zync",
            "red_hat_satellite_6:rubygem-activestorage.src",
            "red_hat_satellite_6:satellite:el8/rubygem-activestorage.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/system-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel7",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel8",
            "red_hat_3scale_api_management_platform_2:3scale-amp2/zync-rhel9",
            "red_hat_3scale_api_management_platform_2:3scale-amp20/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp21/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp22/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp24/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp25/zync",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/system",
            "red_hat_3scale_api_management_platform_2:3scale-amp26/zync",
            "red_hat_satellite_6:rubygem-activestorage.src",
            "red_hat_satellite_6:satellite:el8/rubygem-activestorage.src"
          ]
        }
      ],
      "title": "activestorage: Code injection in Active Storage when used in conjunction with the image_processing gem"
    }
  ]
}