Lucene search
+L

1 matches found

OSV
OSV
added 2017/11/29 11:19 p.m.44 views

GHSA-X7P2-X2J6-MWHR Gemirro Stored XSS in Gemspec "homepage" value

Stored cross-site scripting XSS vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file. A ".gemspec" file must be created with a JavaScript URL in the homepage value. This can be used to bui...

6.1CVSS5.8AI score0.00814EPSS
SaveExploits0References4
Rows per page
Query Builder