Code injection in dragonfly gem (GHSA-qrgf-jqqm-x7xv)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-5671
Severity: HIGH · CWE: CWE-74

`lib/dragonfly/imagemagickutils.rb` in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected packages:
package: ecosystem: RubyGems
name: dragonfly
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.0.0
package: ecosystem: RubyGems
name: fog-dragonfly
ranges: type: ECOSYSTEM
events: introduced: 0
last_affected: 0.9.15