Dragonfly_project Dragonfly
2 CVEs affecting Dragonfly_project Dragonfly. Latest disclosed: 2022-06-02. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-33564 | Critical | 9.8 | 2021-05-29 | An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL w… |
CVE-2021-33473 | Critical | 9.1 | 2022-06-02 | An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. Thi… |