Thoughtbot vulnerabilities

Products

• Administrate 2
• Paperclip 2

Newest

• thoughtbot administrate administrate vulnerable to Cross-Site Request Forgery CVE-2016-3098 Fix available 5.4 MediumAugust 5, 2022
• thoughtbot clearance Open Redirect CVE-2021-23435 Fix available 7.6 HighSeptember 12, 2021
• thoughtbot administrate Sort order SQL injection in Administrate CVE-2020-5257 Fix available 7.7 HighMarch 13, 2020
• thoughtbot paperclip, paperclip ruby gem +1 more paperclip Server-Side Request Forgery vulnerability CVE-2017-0889 Fix available 9.8 CriticalNovember 13, 2017
• thoughtbot paperclip paperclip Cross-site Scripting vulnerability CVE-2015-2963 Fix available 4.3 MediumJuly 10, 2015
• thoughtbot cocaine Cocaine Gem OS Command Injection vulnerability CVE-2013-4457 Fix available 6.8 MediumNovember 2, 2013