Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2013-1756

Disclosure Date: June 09, 2014 (last updated October 05, 2023)
The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.
0
0
Attacker Value
Unknown

CVE-2013-5671

Disclosure Date: May 12, 2014 (last updated October 05, 2023)
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.
0
0