CVE-2021-21305highCWE-74

CVE-2021-21305: falha de alta gravidade em carrierwaveuploader carrierwave

Code Injection vulnerability in CarrierWave

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar carrierwave+ Monitorar carrierwave

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

26Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 13%
CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The "#manipulate!" method inappropriately evals the content of mutation option(:read/:write), allowing attackers to craft a string that can be executed as a Ruby code. If an application developer supplies untrusted inputs to the option, it will lead to remote code execution(RCE). This is fixed in versions 1.3.2 and 2.1.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
carrierwaveuploader · carrierwave
CVEs relacionadas — carrierwaveuploader carrierwave

No mesmo produto, das mais perigosas para as menos.

CVE-2021-21288MEDIUMServer-side request forgery in CarrierWaveEPSS 1.2%CVE-2023-49090MEDIUMCarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSSEPSS 0.6%CVE-2024-29034MEDIUMCarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remainedEPSS 0.4%CVE-2026-44587MEDIUMCarrierWave has a denylisted_content_type bypass via Unescaped Regex MetacharactersEPSS 0.2%