CVE-2017-16833 | BDVDB-2026-92948 Detail

Description#

Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de

Exploit#

No public exploit known

History#

Version 12017-11-15Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.