RubyGems/dragonfly CVE-2013-5671: high, EPSS 2.19%

Code injection in dragonfly gem

Action: Upgrade dragonfly to 1.0.0 or later.

bundle update dragonfly

Affected

Fixed versions

Sources

• osv: GHSA-qrgf-jqqm-x7xv
• https://nvd.nist.gov/vuln/detail/CVE-2013-5671
• https://github.com/markevans/dragonfly/issues/520
• https://github.com/github/advisory-database/pull/486
• https://github.com/markevans/dragonfly
• https://web.archive.org/web/20201208033320/http://www.vapid.dhs.org/advisories/fog-dragonfly-0.8.2-cmd-inj.html
• http://seclists.org/fulldisclosure/2013/Sep/18
• http://seclists.org/oss-sec/2013/q3/526
• http://seclists.org/oss-sec/2013/q3/528

CVE-2013-5671 · published 2017-10-24T18:33:37Z · modified 2024-12-08T05:34:08.990355Z · JSON