Dragonfly Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dragonfly Project records in CISA KEV

No Dragonfly Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dragonfly 2 records HIGH

Records

2 records in Dragonfly · all components

TI-2021-12957 CVE-2021-33564 · GHSA-j858-xp5v-f8xx

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows…

HIGH 80

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72143 Published 2021-05-29 Fixed in 1.4.0 CWE-88

TI-2021-12880 CVE-2021-33473 · GHSA-fj34-jhjx-xmvv

An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read…

MEDIUM 41

An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01111 Published 2022-06-02 Fixed in 1.4.0 CWE-88

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0