{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.9.15"}],"component":"fog-dragonfly","cve_ids":["CVE-2013-5671"],"ecosystem":"RubyGems","epss":0.02188,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qrgf-jqqm-x7xv","id":"tcs_01M5KEN2AJNK0GE7JN6A923JWD","modified_at":"2024-12-08T05:34:08.990355Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-qrgf-jqqm-x7xv","https://nvd.nist.gov/vuln/detail/CVE-2013-5671","https://github.com/markevans/dragonfly/issues/520","https://github.com/github/advisory-database/pull/486","https://github.com/markevans/dragonfly","https://web.archive.org/web/20201208033320/http://www.vapid.dhs.org/advisories/fog-dragonfly-0.8.2-cmd-inj.html","http://seclists.org/fulldisclosure/2013/Sep/18","http://seclists.org/oss-sec/2013/q3/526","http://seclists.org/oss-sec/2013/q3/528"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qrgf-jqqm-x7xv#RubyGems/fog-dragonfly","url":"https://osv.dev/vulnerability/GHSA-qrgf-jqqm-x7xv"}],"summary":"Code injection in dragonfly gem"}