Reverse Tabnabbing

texthelpers is vulnerable to reverse tabnabbing. The vulnerability exists in multiple functions in translation.rb due to lack of proper regular expression which allows an attacker to use web links to untrusted targets with window.opener access...

TextHelpers 安全漏洞

TextHelpers is a library by Andrew Horner, a personal developer. It is designed to make working with static text in Rails projects as easy as possible. A security vulnerability exists in TextHelpers versions prior to 1.2.0, which stems from a problem with unknown code in the file...

CVE-2020-36624 ahorner text-helpers translation.rb reverse tabnabbing

A vulnerability was found in ahorner text-helpers up to 1.0.x. It has been declared as critical. This vulnerability affects unknown code of the file lib/texthelpers/translation.rb. The manipulation of the argument link leads to use of web link to untrusted target with window.opener access. The...