{"width":"100%","blog_title":"TT \u8106\u5f31\u6027 Blog","image_url":null,"title":"Ruby on Rails\u306eActive Storage\u306b\u304a\u3051\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\uff08CVE-2026-66066\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77","version":"1.0","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fvul.hatenadiary.com%2Fentry%2F2026%2F07%2F30%2F000000_1\" title=\"Ruby on Rails\u306eActive Storage\u306b\u304a\u3051\u308b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027\uff08CVE-2026-66066\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 - TT \u8106\u5f31\u6027 Blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","provider_name":"Hatena Blog","height":"190","url":"https://vul.hatenadiary.com/entry/2026/07/30/000000_1","author_name":"security-lab","provider_url":"https://hatena.blog","blog_url":"https://vul.hatenadiary.com/","published":"2026-07-30 00:00:00","description":"\u3010\u8981\u70b9\u3011 \u25ceJPCERT/CC\u306fRails\u306e\u91cd\u5927\u8106\u5f31\u6027\u300cKindaRails2Shell\u300d\u306ePoC\u516c\u958b\u3092\u53d7\u3051\u3001\u65e9\u6025\u306a\u66f4\u65b0\u3068\u4fb5\u5bb3\u524d\u63d0\u306e\u8a8d\u8a3c\u60c5\u5831\u5909\u66f4\u3092\u63a8\u5968\u3057\u3001WAF\u3060\u3051\u3067\u306f\u5341\u5206\u306a\u5bfe\u7b56\u306b\u306a\u3089\u306a\u3044\u3068\u8b66\u544a\u3057\u305f (JPCERT/CC)","author_url":"https://blog.hatena.ne.jp/security-lab/","categories":["\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af: Ruby on Rails","\u8106\u5f31\u6027: KindaRails2Shell","CVE-2026-66066"],"type":"rich"}