Lucene search
+L
Mark EvansFog-dragonfly

1 matches found

CVE
CVE
added 2014/05/12 2:00 p.m.73 views

CVE-2013-5671

The CVE-2013-5671 issue affects the fog-dragonfly gem for Ruby (version 0.8.2) where lib/dragonfly/imagemagickutils.rb passes unescaped user input to shell commands, enabling remote command execution via unspecified vectors. The root cause is input not being sanitized before constructing the comm...

7.5CVSS7.8AI score0.02188EPSS
Save