Skip to content
OpenAdvisories

Package · RubyGems

dragonfly

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical 9.1
    CVE-2021-33473

    Arbitrary file write in dragonfly

    An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. This vulnerability is exploited via a crafted URL.

    dragonfly RubyGems
  • Critical 9.8
    CVE-2021-33564 Public exploit Scanner template EPSS 72%

    Dragonfly contains remote code execution vulnerability

    An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs because t…

    dragonfly RubyGems
  • High —
    CVE-2013-1756

    Dragonfly Code Injection vulnerability

    The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

    dragonfly RubyGems
  • High —
    CVE-2013-5671

    Code injection in dragonfly gem

    lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

    dragonfly fog-dragonfly RubyGems