Lucene search
PRIOn knowledge basePRION:CVE-2013-1756HistoryJun 09, 2014 - 7:55 p.m.
Cross site request forgery (csrf)
2014-06-0919:55:00
PRIOn knowledge base
www.prio-n.com
4
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.328 Low
EPSS
Percentile
97.1%
The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.
Related
freebsd
freebsd
rubygem-dragonfly -- arbitrary code execution
2013-02-19 00:00:00
cvelist
cvelist
CVE-2013-1756
2014-06-09 19:00:00
nessus
nessus
github
github
Dragonfly Code Injection vulnerability
2017-10-24 18:33:37
cve
cve
CVE-2013-1756
2014-06-09 19:55:06
osv
osv
Dragonfly Code Injection vulnerability
2017-10-24 18:33:37
nvd
nvd
CVE-2013-1756
2014-06-09 19:55:06
8.2 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.328 Low
EPSS
Percentile
97.1%
Related for PRION:CVE-2013-1756