CVE-2021-21305highCWE-74

CVE-2021-21305: fallo de gravedad alta en carrierwaveuploader carrierwave

Code Injection vulnerability in CarrierWave

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear carrierwave+ Monitorear carrierwave

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

26Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.4epss 13%
CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "#manipulate!" method inappropriately evals the content of mutation option(:read/:write), allowing attackers to craft a string that can be executed as a Ruby code. If an application developer supplies untrusted inputs to the option, it will lead to remote code execution(RCE). This is fixed in versions 1.3.2 and 2.1.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Productos afectados
carrierwaveuploader · carrierwave
CVEs relacionadas — carrierwaveuploader carrierwave

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-21288MEDIUMServer-side request forgery in CarrierWaveEPSS 1.2%CVE-2023-49090MEDIUMCarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSSEPSS 0.6%CVE-2024-29034MEDIUMCarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remainedEPSS 0.4%CVE-2026-44587MEDIUMCarrierWave has a denylisted_content_type bypass via Unescaped Regex MetacharactersEPSS 0.2%