GitHub Advisoryadvisory · RubyGems

GHSA-r5hc-9xx5-97rw i18n gem Cross-site Scripting vulnerability

MEDIUM Published 2017-10-24 Modified 2023-07-04 Official page ↗
Aliases
CVE-2013-4492
Ecosystem
RubyGems
Packages
i18n
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2020-06-16

Affected packages

• RubyGems i18n: < 0.6.6 → fixed in 0.6.6

Description

Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call.

Related

Alias · CVE (1)

  • CVE-2013-4492 Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References