Security Advisory

CVE-2021-33473

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-06-02 19:55:57
Last updated 2024-08-03 23:50:43
Assigner mitre
State PUBLISHED

Description

An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. This vulnerability is exploited via a crafted URL.