Mark EvansFog-dragonfly
1 matches found
CVE-2013-5671
The CVE-2013-5671 issue affects the fog-dragonfly gem for Ruby (version 0.8.2) where lib/dragonfly/imagemagickutils.rb passes unescaped user input to shell commands, enabling remote command execution via unspecified vectors. The root cause is input not being sanitized before constructing the comm...
7.5CVSS7.8AI score0.02188EPSS
Save