Thoughtbot Paperclip
2 CVEs affecting Thoughtbot Paperclip. Latest disclosed: 2017-11-13. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0889 | Critical | 9.8 | 2017-11-13 | Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be… |
CVE-2015-2963 | | 2015-07-10 | The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to uplo… |