Script Injection in Show In Browser gem (GHSA-9hx9-w2j6-rw76)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-2105
Severity: MODERATE · CWE: CWE-59

The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on `/tmp/browser.html`.

Affected packages:
package: ecosystem: RubyGems
name: show_in_browser
versions: 0.0.3