CVE-2013-5671: High severity Mark Evans Fog-dragonfly Ruby vulnerability
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.
Other sources
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5671?
CVE-2013-5671 is classified as a high-severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2013-5671?
To fix CVE-2013-5671, upgrade the fog-dragonfly gem to version 0.9.16 or later.
What software is affected by CVE-2013-5671?
CVE-2013-5671 affects the fog-dragonfly gem version 0.8.2 and versions up to 0.9.15.
What consequences can arise from CVE-2013-5671 exploitation?
Exploitation of CVE-2013-5671 may allow attackers to execute arbitrary commands on the affected system.
Is CVE-2013-5671 relevant to other versions of the fog-dragonfly gem?
Yes, CVE-2013-5671 affects all versions of the fog-dragonfly gem up to 0.9.15.