Skip to content
OpenAdvisories

Package · RubyGems

dragonfly

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High —
    CVE-2013-1756

    Dragonfly Code Injection vulnerability

    The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

    dragonfly RubyGems
  • High —
    CVE-2013-5671

    Code injection in dragonfly gem

    lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

    dragonfly fog-dragonfly RubyGems