CVE-2021-33473

9.1

CRITICALCVSS v3

Published

June 2, 2022

CVSS v2

4.9 MEDIUM

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. This vulnerability is exploited via a crafted URL.

dragonfly

NPMTiny error manager for big applications.

= 1.3.0, < 1.4.0NVD

logicalparadox/dragonfly

GitHubTiny error manager for big applications.

= 1.3.0, < 1.4.0NVD

markevans/dragonfly

GitHub

More on this CVE

NVD↗GitHub Advisory↗

A Ruby gem for on-the-fly processing - suitable for image uploading in Rails, Sinatra and much more!

= 1.3.0, < 1.4.0NVD

dragonflyoss/dragonfly

GitHubDelivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.

= 1.3.0, < 1.4.0NVD

dragonflydb/dragonfly

GitHubA modern replacement for Redis and Memcached

= 1.3.0, < 1.4.0NVD

Security Advisories

CVE-2021-33473

Description

More on this CVE