i18n gem Cross-site Scripting vulnerability  (GHSA-r5hc-9xx5-97rw)
Published: 2017-10-24T18:33:37Z
Aliases: CVE-2013-4492
Severity: MODERATE · CWE: CWE-79

Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

Affected packages:
package: ecosystem: RubyGems
name: i18n
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 0.6.6