CVE-2013-2105: Jonathan Leung Show In Browser

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html.

Affected products

• Jonathan Leung Show In Browser: version 0.0.3 only

Published 2014-04-22. Last modified 2026-06-16.