CVE-2017-0889

Critical

Published: 13/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Paperclip gem version 3.1.4 and later has a Server-Side Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.

Risk Assessment

This vulnerability may lead to the exposure of sensitive information about the organization's internal resources, increasing the risk of attacks on the network infrastructure.

Recommendation

It is recommended to update the Paperclip gem to the latest version to mitigate this vulnerability and to monitor access to network resources.

Original NVD description (English source)

Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be able to access information about internal network resources.