CVE-2021-21305highCWE-74

CVE-2021-21305: high-severity vulnerability in carrierwaveuploader carrierwave

Code Injection vulnerability in CarrierWave

Published · Updated

Follow this CVE+ Monitor carrierwave+ Monitor carrierwave

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

26Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 13%
CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "#manipulate!" method inappropriately evals the content of mutation option(:read/:write), allowing attackers to craft a string that can be executed as a Ruby code. If an application developer supplies untrusted inputs to the option, it will lead to remote code execution(RCE). This is fixed in versions 1.3.2 and 2.1.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected products
carrierwaveuploader · carrierwave
Related CVEs — carrierwaveuploader carrierwave

In the same product, most dangerous first.

CVE-2021-21288MEDIUMServer-side request forgery in CarrierWaveEPSS 1.2%CVE-2023-49090MEDIUMCarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSSEPSS 0.6%CVE-2024-29034MEDIUMCarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remainedEPSS 0.4%CVE-2026-44587MEDIUMCarrierWave has a denylisted_content_type bypass via Unescaped Regex MetacharactersEPSS 0.2%