papercrop does not properly handle crop input

심각 9.8CVE-2015-2784 · GHSA-m44r-gv6q-9j9r · Published 21/01/2020 · updated 17/06/2026

요약

CVE-2015-2784은(는) papercrop, papercrop (papercrop project)에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.8%, 전체 취약점의 78.4%보다 높음.
조치: 0.3.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
papercrop RubyGems	`< 0.3.0`	`0.3.0`
papercrop papercrop_project	`< 0.3.0`	`0.3.0`

The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

NVD description

The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.