CVE-2017-0889

Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery SSRF vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources...

CVE-2017-0889

CVE-2017-0889 affects Paperclip Ruby gem 3.1.4+ (Paperclip::UriAdapter, Paperclip::HttpUrlProxyAdapter) with a Server-Side Request Forgery (SSRF) vulnerability that may allow an attacker to access internal network resources. The connected documents corroborate the vulnerability and impact, but do...