Lucene search
+L

3 matches found

osv_ubuntu
osv_ubuntu
•added 2021/02/08 8:15 p.m.•23 views

UBUNTU-CVE-2021-21305

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "manipulate!" method inappropriately evals the content of mutation option:read/:write...

8.8CVSS7.5AI score0.12678EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2021/02/08 8:15 p.m.•12 views

CVE-2021-21305

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "manipulate!" method inappropriately evals the content of mutation option:read/:write...

8.8CVSS7.4AI score0.12678EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2021/02/08 7:20 p.m.•61 views

CVE-2021-21305 Code Injection vulnerability in CarrierWave

CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "manipulate!" method inappropriately evals the content of mutation option:read/:write...

7.4CVSS9.1AI score0.12678EPSS
SaveExploits1References5
Rows per page
Query Builder