CVE-2013-4318

File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory.

Score

CVSS 3.1 5.4 Medium

Status

Modified - secalert@redhat.com

Published

2019-12-26

Last modified

2024-08-06

Weaknesses

CWE-74

Affected products

• Feature (Feature Project)
• Features (Features)

References

• http://www.openwall.com/lists/oss-security/2013/09/09/10
• https://security-tracker.debian.org/tracker/CVE-2013-4318