~ / search / GHSA-42gq-h7xj-33r4

GHSA-42gq-h7xj-33r4

Features file injection vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-4318

Packages

EcosystemPackageAffectedFixed in
RubyGems features <= 0.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the `/tmp` directory.

References

External links from the advisory. They lead to third-party sites.