VDB

GCVE-110-MAGEIA-2014-17

GCVE-110-MAGEIA-2014-17
Advisory Published
Vulnetix · Advisory published January 21, 2014
Cross-site scripting (XSS) vulnerability in exceptions.rb in the i18n gem before 0.6.6 for Ruby allows remote attackers to inject arbitrary web script or HTML via a crafted I18n::MissingTranslationData.new call (CVE-2013-4492).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaapper0 (affected), 0.8.1-3.1.mga4 (unaffected)—
Mageiaruby-i18n0 (affected), 0.6.1-3.1.mga3 (unaffected), 0 (affected), 0.6.1-3.1.mga3 (unaffected)—

Aliases

CVE-2013-4492

References

Updated ruby-i18n package fixes security vulnerability
advisory
Updated ruby-i18n package fixes security vulnerability
issue
Updated ruby-i18n package fixes security vulnerability
issue
Updated apper package disables broken update notifications
advisory
Updated apper package disables broken update notifications
issue

Browse GCVE Records

73,044 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›