Paperclip Local DNS Rebinding Vulnerability

Paperclip, a Ruby gem for handling file uploads, is affected by a vulnerability that allows attackers to execute arbitrary commands via DNS rebinding.

In default local_trusted mode, Paperclip fails to validate Host headers, enabling an attacker to craft a malicious webpage. When a developer running Paperclip locally visits this page, DNS rebinding is used to make authenticated API requests and execute commands through the process adapter.