Lucene search

K
osvGoogleOSV:CVE-2017-16833
HistoryNov 15, 2017 - 9:29 a.m.

CVE-2017-16833

2017-11-1509:29:00
Google
osv.dev
3

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

34.9%

Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the “homepage” value of a “.gemspec” file.

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

34.9%