Features file injection vulnerability

2022-05-0500:29:11

Google

osv.dev

0.001 Low

EPSS

Percentile

26.4%

File injection vulnerability in Ruby gem Features 0.3.0 allows remote attackers to inject malicious html in the /tmp directory.

CPENameOperatorVersion
featureseq0.1.2
featureseq0.3.0
featureseq0.1.4
featureseq0.1.0
featureseq0.1.3
featureseq0.2.0
featureseq0.2.1

Name	Operator	Version
features	eq	0.1.2
features	eq	0.3.0
features	eq	0.1.4
features	eq	0.1.0
features	eq	0.1.3
features	eq	0.2.0
features	eq	0.2.1

References

www.openwall.com/lists/oss-security/2013/09/09/10

github.com/mhennemeyer/features

github.com/rubysec/ruby-advisory-db/blob/master/gems/features/CVE-2013-4318.yml

nvd.nist.gov/vuln/detail/CVE-2013-4318

security-tracker.debian.org/tracker/CVE-2013-4318

0.001 Low

EPSS

Percentile

26.4%

Related for OSV:GHSA-42GQ-H7XJ-33R4