CVE-2024-29034

Summary

CVE-2024-29034 is a newly discovered vulnerability affecting CarrierWave, a popular file upload solution for Ruby web frameworks like Rails and Sinatra. Despite the previous vulnerability (CVE-2023-49090) being addressed, this issue persists. The problem lies in object storage uploads, such as Amazon S3, where a malicious user can manipulate the Content-Type value, providing multiple values separated by commas. These bypassed values can trick browsers into allowing XSS attacks, which contradict the defined `content_type_allowlist`. To mitigate this risk, it is recommended to upgrade to CarrierWave versions 3.0.7 or 2.2.6.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.