Our server was exploited by a ransomware. We allow admins to upload PDF, docx, excel etc. But also images and SVG.
And we use dragonfly to generate thumbnails on those files that are supported.
Let's say I upload a infected image to the server.
When resizing images with imagemagick, are the files being executed or just read? Can a resize jeopardize the security of a server?