CVE-2021-33473

2022-06-0220:15:07

Google

osv.dev

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. This vulnerability is exploited via a crafted URL.

CPENameOperatorVersion
dragonflyeq0.8.3
dragonflyeq0.9.13
dragonflyeq0.7.0
dragonflyeq0.3.0
dragonflyeq1.0.8
dragonflyeq0.3.6
dragonflyeqsecurity_fix
dragonflyeq0.7.2
dragonflyeq0.9.14
dragonflyeq1.0.7

Name	Operator	Version
dragonfly	eq	0.8.3
dragonfly	eq	0.9.13
dragonfly	eq	0.7.0
dragonfly	eq	0.3.0
dragonfly	eq	1.0.8
dragonfly	eq	0.3.6
dragonfly	eq	security_fix
dragonfly	eq	0.7.2
dragonfly	eq	0.9.14
dragonfly	eq	1.0.7