Security Advisory

CVE-2016-5737

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-01-12 23:00:00

Last updated 2024-08-06 01:07:59

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.

← Browse all CVEs View on cve.org ↗