Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ruby dragonfly Gem 远程任意代码执行漏洞
Vulnerability Description
Dragonfly gem for Ruby是英国软件开发者Mark Evans所研发的一款用于动态处理Rails、Sinatra等框架的图像上传的Ruby Gem。 Dragonfly gem for Ruby 0.7.0和0.9.12版本中存在安全漏洞。当程序与Ruby on Rails一起使用时，远程攻击者可通过发送特制的请求利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A