CVE-2013-5671 – Fog Dragonfly 0.8.2 Command Injection

https://notcve.org/view.php?id=CVE-2013-5671

03 Sep 2013 — lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors. lib/dragonfly/imagemagickutils.rb en la gema fog-dragonfly 0.8.2 para Ruby permite a atacantes remotos ejecutar comandos arbitrarios a través de vectores no especificados. Ruby Gem Fog Dragonfly version 0.8.2 suffers from a remote command injection vulnerability. • http://seclists.org/fulldisclosure/2013/Sep/18 •