CVE-2017-0889 | BDVDB-2026-92741 Detail

thoughtbotpaperclip ruby gem

Description#

Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-918 Server-Side Request Forgery (SSRF)

References#

https://hackerone.com/reports/209430
https://github.com/thoughtbot/paperclip/pull/2435
https://hackerone.com/reports/713

Exploit#

No public exploit known

History#

Version 12017-11-13Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.