CVE-2013-1756

Published: Jun 9, 2014Modified: May 6, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

Affected (26)

Products: Mark Evans: Dragonfly Gem

Mark Evans

1 product

Dragonfly Gem

Configuration A

26 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mark Evans Dragonfly Gem	Version 0.7.0
Mark Evans Dragonfly Gem	Version 0.7.1
Mark Evans Dragonfly Gem	Version 0.7.2
Mark Evans Dragonfly Gem	Version 0.7.3
Mark Evans Dragonfly Gem	Version 0.7.4
Mark Evans Dragonfly Gem	Version 0.7.5
Mark Evans Dragonfly Gem	Version 0.7.6
Mark Evans Dragonfly Gem	Version 0.7.7
Mark Evans Dragonfly Gem	Version 0.8.0
Mark Evans Dragonfly Gem	Version 0.8.1
Mark Evans Dragonfly Gem	Version 0.8.2
Mark Evans Dragonfly Gem	Version 0.8.4
Mark Evans Dragonfly Gem	Version 0.8.5
Mark Evans Dragonfly Gem	Version 0.9.0
Mark Evans Dragonfly Gem	Version 0.9.10
Mark Evans Dragonfly Gem	Version 0.9.11
Mark Evans Dragonfly Gem	Version 0.9.12
Mark Evans Dragonfly Gem	Version 0.9.1
Mark Evans Dragonfly Gem	Version 0.9.2
Mark Evans Dragonfly Gem	Version 0.9.3
Mark Evans Dragonfly Gem	Version 0.9.4
Mark Evans Dragonfly Gem	Version 0.9.5
Mark Evans Dragonfly Gem	Version 0.9.6
Mark Evans Dragonfly Gem	Version 0.9.7
Mark Evans Dragonfly Gem	Version 0.9.8
Mark Evans Dragonfly Gem	Version 0.9.9