Security Advisory

CVE-2017-16833

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-11-15 09:00:00
Last updated 2024-09-16 16:24:03
Assigner mitre
State PUBLISHED

Description

Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.