Description
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | dragonfly | < 1.0.0 | 1.0.0 | GHSA-qrgf-jqqm-x7xv |
| RubyGems | fog-dragonfly | <= 0.9.15 | — | GHSA-qrgf-jqqm-x7xv |
References
- 20130903 Remote Command Injection in fog-dragonfly-0.8.2 Ruby Gem mailing-list
- [oss-security] 20130901 Re: Remote Command Injection in fog-dragonfly-0.8.2 Ruby Gem mailing-list
- http://www.vapid.dhs.org/advisories/fog-dragonfly-0.8.2-cmd-inj.html
- [oss-security] 20130901 Remote Command Injection in fog-dragonfly-0.8.2 Ruby Gem mailing-list
- 96798 vdb-entry