Home > Vulnerability Database > CVE-2013-1756

Mend Vulnerability Database

CVE-2013-1756

Good to know:

Date: June 9, 2014

The Dragonfly gem 0.7 before 0.8.6 and 0.9.x before 0.9.13 for Ruby, when used with Ruby on Rails, allows remote attackers to execute arbitrary code via a crafted request.

Language: Ruby

Severity Score

7.5

Related Resources (5)

Url: http://secunia.com/advisories/52380

Url: http://www.securityfocus.com/bid/58225

Url: https://github.com/markevans/dragonfly/commit/a8775aacf9e5c81cf11bec34b7afa7f27ddfe277

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-1756

Url: https://www.mend.io/vulnerability-database/CVE-2013-1756

Severity Score

7.5

Weakness Type (CWE)

Code Injection

CWE-94

Top Fix

Upgrade Version

CVSS v2

Base Score:	7.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2013-1756

Good to know:

Date: June 9, 2014

Language: Ruby

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?