An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishandle use of the ImageMagick convert utility.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to
    read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead
    to code execution. The problem occurs because the generate and process features mishandle use of the
    ImageMagick convert utility. (CVE-2021-33564)

Dragonfly is a popular ruby library used for handling images on websites to generate image thumbnails, text images or managing attachments. When the `verify_urls` option is disabled, an attacker can leverage the vulnerability to inject malicious arguments to shell commands and achieve file read and write, or remote code execution on the target application.

NVD reports :

An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishandle use of the ImageMagick convert utility.

ID	Name	Product	Family	Severity
416230	SCA: security update for dragonfly (GHSA-j858-xp5v-f8xx)	Tenable Cloud Security	SCA Checks	critical
416230	SCA: security update for dragonfly (GHSA-j858-xp5v-f8xx)	Tenable Self-Hosted Container Security	SCA Checks	critical
112974	Dragonfly Ruby Gem < 1.4.0 Argument Injection Vulnerability	Web App Scanning	Component Vulnerability	critical
151002	FreeBSD : dragonfly -- argument injection (c9e2a1a7-caa1-11eb-904f-14dae9d5a9d2)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2021-33564

critical

Tenable Plugins

critical

critical

critical

critical