fog-dragonfly 0.8.2
Dragonfly Gem for Ruby on Windows Shell Escaping Weakness
high severity OSVDB-97854>= 0.9.6
Dragonfly Gem for Ruby contains a flaw that is due to the program failing to properly escape a shell that contains injected characters. This may allow a context-dependent attacker to potentially execute arbitrary commands.
This gem has been renamed. Please use "dragonfly" from now on.
Dragonfly Gem for Ruby Image Uploading & Processing Remote Command Execution
high severity OSVDB-110439>= 0.8.4
Dragonfly Gem for Ruby contains a flaw in Uploading & Processing that is due to the gem failing to restrict arbitrary commands to imagemagicks convert. This may allow a remote attacker to gain read/write access to the filesystem and execute arbitrary commands.
This gem has been renamed. Please use "dragonfly" from now on.
fog-dragonfly Gem for Ruby imagemagickutils.rb Remote Command Execution
high severity CVE-2013-5671>= 0.8.4
fog-dragonfly Gem for Ruby contains a flaw that is due to the program failing to properly sanitize input passed via the imagemagickutils.rb script. This may allow a remote attacker to execute arbitrary commands.
This gem has been renamed. Please use "dragonfly" from now on.
Dragonfly Gem for Ruby Crafted Request Parsing Remote Code Execution
high severity CVE-2013-1756>= 0.9.14
< 0.7.0
Dragonfly Gem for Ruby contains a flaw that is triggered during the parsing of a specially crafted request. This may allow a remote attacker to execute arbitrary code.
This gem has been renamed. Please use "dragonfly" from now on.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
Author did not declare license for this gem in the gemspec.
This gem version has a MIT license in the source code, however it was not declared in the gemspec file.
This gem version is available.
This gem version has not been yanked and is still available for usage.