CVE-2015-2963 paperclip Cross-site Scripting vulnerability
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to upload HTML documents and conduct cross-site scripting (XSS) attacks via a spoofed value, as demonstrated by image/jpeg.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems paperclip(RubyGems) | < 4.2.2 | 4.2.2 |
| rubygems paperclip(RubyGems) | = 2.1.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.1.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.1.5 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.3 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.4 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.5 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.6 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.7 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.8 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.9.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.2.9.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.1.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.10 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.11 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.12 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.15 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.16 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.3 | No fix listed |
Show 47 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems paperclip(RubyGems) | = 2.3.4 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.5 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.6 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.7 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.8 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.3.9 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.4.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.4.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.4.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.4.3 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.4.4 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.4.5 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.5.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.5.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.5.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.6.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.7.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.7.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.7.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.7.4 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.7.5 | No fix listed |
| rubygems paperclip(RubyGems) | = 2.8.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.0.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.0.3 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.0.4 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.1.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.1.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.1.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.1.4 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.2.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.2.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.3.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.3.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.4.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.4.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.4.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.5.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.5.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.5.2 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.5.3 | No fix listed |
| rubygems paperclip(RubyGems) | = 3.5.4 | No fix listed |
| rubygems paperclip(RubyGems) | = 4.0.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 4.1.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 4.1.1 | No fix listed |
| rubygems paperclip(RubyGems) | = 4.2.0 | No fix listed |
| rubygems paperclip(RubyGems) | = 4.2.1 | No fix listed |
| thoughtbot paperclip | <= 4.2.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit patch vendor-advisory
- robots.thoughtbot.com vendor-advisory
- JVN#83881261 third-party-advisory vendor-advisory
- JVNDB-2015-000088 third-party-advisory vendor-advisory
- [oss-security] 20150618 Re: CVE request: Content type spoofing in ruby gem paperclip <4.2.2 mailing-list vendor-advisory
- web.archive.org
- github.com
- github.com product
- 75304 vdb-entry