147 matches found
CVE-2016-5737
The CVE-2016-5737 entry describes a vulnerability in the OpenStack puppet-gerrit module (OpenStack-infra). The root cause is that Gerrit configuration improperly marks text/html as a safe mimetype, which could allow remote attackers to perform cross-site scripting (XSS) via a crafted review. The ...
CVE-2016-5737
The Gerrit configuration in the Openstack Puppet module for Gerrit aka puppet-gerrit improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting XSS attacks via a crafted review...
PT-2017-8755
Name of the Vulnerable Software and Affected Versions Openstack Puppet module for Gerrit affected versions not specified Description The issue is related to the Gerrit configuration in the Openstack Puppet module, where text/html is improperly marked as a safe mimetype. This could potentially all...
Openstack-infra puppet-gerrit module cross-site scripting vulnerability
OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Openstack-infra is the infrastructure used in it. puppet-gerrit is one of the components used to install gerrit and manage the OpenStack infrastructure. A cross-site...
CVE-2006-3832
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3832
CVE-2006-3832 affects Loudblog 0.5 and earlier. The vulnerability is an SQL injection in the index.php script where the vulnerable code uses the request parameter id directly in a database query, enabling remote attackers to execute arbitrary SQL commands. The confirmed impact includes potential ...