Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This addresses CVE-2017-0889 Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources. https://nvd.nist.gov/vuln/detail/CVE-2017-0889
- Loading branch information