CVE-2017-16833

Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-11-15

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Gemirro (Gemirro Project)

References

• https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de