CVE-2013-2105: Injection vulnerability in /tmp file

April 22, 2014 (updated August 28, 2017)

By a malicious user creating /tmp/browser.html first and repeatedly writing to it, they can inject malicious html into the file right before it is about to be opened.

References

vapid.dhs.org/advisories/show_in_browser_tmp_vuln.html

Detect and mitigate CVE-2013-2105 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →