Amendment: Possible Remote Code Execution Exploit in Rails Action View

What was supposed to be a file disclosure turned into a remote code exécution.