Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2013-5671

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qrgf-jqqm-x7xv

Code injection in dragonfly gem `lib/dragonfly/imagemagickutils.rb` in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

gitlab/gem/dragonfly/CVE-2013-5671

Command Injection lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

gitlab/gem/fog-dragonfly/CVE-2013-5671

Remote Command Injection Unescaped user supplied input is passed to the command line for shell execution in `lib/dragonfly/imagemagickutils.rb`.

ruby_advisory_db/gems/dragonfly/CVE-2013-5671

fog-dragonfly Gem for Ruby imagemagickutils.rb Remote Command Execution fog-dragonfly Gem for Ruby contains a flaw that is due to the program failing to properly sanitize input passed via the imagemagickutils.rb script. This may allow a remote attacker to execute arbitrary commands.

ruby_advisory_db/gems/fog-dragonfly/CVE-2013-5671

fog-dragonfly Gem for Ruby imagemagickutils.rb Remote Command Execution fog-dragonfly Gem for Ruby contains a flaw that is due to the program failing to properly sanitize input passed via the imagemagickutils.rb script. This may allow a remote attacker to execute arbitrary commands. This gem has been renamed. Please use "dragonfly" from now on.