https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:07:38 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-04549 cnvd-2015-04549 https://cve.radiocsirt.org/vuln/cnvd-2015-04549 https://cve.radiocsirt.org/vuln/euvd-2026-91498 EUVD-2026-91498 https://cve.radiocsirt.org/vuln/euvd-2026-91498 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2963 <p>The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to upload HTML documents and conduct cross-site scripting (XSS) attacks via a spoofed value, as demonstrated by image/jpeg.</p> <p>The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to upload HTML documents and conduct cross-site scripting (XSS) attacks via a spoofed value, as demonstrated by image/jpeg.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-2963 https://cve.radiocsirt.org/vuln/ghsa-6jvm-3j5h-79f6 <p><strong>Affected:</strong> RubyGems: paperclip</p> <p>The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to upload HTML documents and conduct cross-site scripting (XSS) attacks via a spoofed value, as demonstrated by image/jpeg.</p> <p><strong>Affected:</strong> RubyGems: paperclip</p> <p>The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to upload HTML documents and conduct cross-site scripting (XSS) attacks via a spoofed value, as demonstrated by image/jpeg.</p> https://cve.radiocsirt.org/vuln/ghsa-6jvm-3j5h-79f6 https://cve.radiocsirt.org/vuln/gsd-2015-2963 gsd-2015-2963 https://cve.radiocsirt.org/vuln/gsd-2015-2963 https://cve.radiocsirt.org/vuln/jvndb-2015-000088 <p>Paperclip provided by thoughtbot is a library to upload files in Ruby on Rails. Paperclip contains a persistent cross-site scripting vulnerability (CWE-79). MORI Shingo of DeNA Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Paperclip provided by thoughtbot is a library to upload files in Ruby on Rails. Paperclip contains a persistent cross-site scripting vulnerability (CWE-79). MORI Shingo of DeNA Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2015-000088