CVE-2013-1756 in Dragonfly gem

Riassunto

di MITRE

The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 15/02/2013
• Divulgazione: 09/06/2014
• Moderazione: accettato
• Voce: VDB-69983
• CPE: pronto
• CWE: CWE-94 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.03713
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-1756
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-1756
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-1756/