Description
Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| thoughtbot | paperclip ruby gem | All versions since 3.1.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | paperclip | >= 3.1.4, < 5.2.0 | 5.2.0 | GHSA-5jcf-c5rg-rmm8 |