Remote Command Injection in fog-dragonfly-0.8.2 Ruby Gem

#809 · 2013-09-01

CVE ID(s): CVE-2013-5671

Notified: 2013-09-01

Description:

Dragonfly is an on-the-fly Rack-based image handling framework. It is suitable for use with Rails, Sinatra and other web frameworks. Although it's mainly used for images, it can handle any content type.

Notes:

Download: https://rubygems.org/gems/fog-dragonfly

URL: http://www.vapid.dhs.org/advisories/fog-dragonfly-0.8.2-cmd-inj.html