What’s Vulnerable › Vulnerabilities

CVE-2013-5671

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-05-12 · updated 2026-06-16

Description

lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected products

• Mark Evans Fog-Dragonfly: 0.8.2

References

• http://seclists.org/fulldisclosure/2013/Sep/18
• http://seclists.org/oss-sec/2013/q3/526
• http://seclists.org/oss-sec/2013/q3/528
• http://www.osvdb.org/96798
• http://www.vapid.dhs.org/advisories/fog-dragonfly-0.8.2-cmd-inj.html
• http://seclists.org/fulldisclosure/2013/Sep/18
• http://seclists.org/oss-sec/2013/q3/526
• http://seclists.org/oss-sec/2013/q3/528
• http://www.osvdb.org/96798
• http://www.vapid.dhs.org/advisories/fog-dragonfly-0.8.2-cmd-inj.html

Get alerted when CVE-2013-5671 or the next vulnerability affects your stack