GitHub Advisoryadvisory · RubyGems

GHSA-m44r-gv6q-9j9r papercrop does not properly handle crop input

CRITICAL Published 2022-05-24 Modified 2023-01-24 Official page ↗

Aliases: CVE-2015-2784
Ecosystem: RubyGems
Packages: papercrop
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-20
Reviewed: 2023-01-24

Affected packages

• RubyGems papercrop: < 0.3.0 → fixed in 0.3.0

Description

The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

Related

Alias · CVE (1)

CVE-2015-2784 The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input. vulnerability

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References