critical9.8
CVE-2017-0889
Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class.
Impact
Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thoughtbot | Paperclip | from 3.1.4 before 5.2.0 |