CVE-2017-0889CWE-918

CVE-2017-0889: vulnerability in thoughtbot paperclip ruby gem

Published · Updated

Follow this CVE+ Monitor paperclip ruby gem+ Monitor paperclip

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.1%
Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.
Affected products
thoughtbot · paperclip ruby gem