Vulnerability in Jonathan Leung Show In Browser
CVE-2013-2105
The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html.
EPSS: 0.004 (31.8th percentile) — read the EPSS interpretation.
Affected products
- Jonathan_leung Show_in_browser — versions 0.0.3
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (mailing-list, x_refsource_MLIST, Exploit)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (vdb-entry, x_refsource_XF)