Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-1756
7.5
HIGHCVSS v2
Published
June 9, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.
markevans/dragonfly
GitHubA Ruby gem for on-the-fly processing - suitable for image uploading in Rails, Sinatra and much more!
GitHubA Ruby gem for on-the-fly processing - suitable for image uploading in Rails, Sinatra and much more!>= 0.7, < 0.8.6, >= 0.9, < 0.9.13NVD