Skip to main content
← All vulnerabilities
CVE-2013-5671GHSA-QRGF-JQQM-X7XV

lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecif

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 1.0.0
None on Exploit-DB, Metasploit or GitHub

Summary

lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

  • dragonflyRubyGems

    fixed in 1.0.0

  • fog-dragonflyRubyGems

    through 0.9.15

References 5

seclists.org

vapid.dhs.org

osvdb.org