CVE-2017-16833

CVE-2017-16833 describes a stored XSS vulnerability in the RubyGem reposito ry tool Gemirro prior to version 0.16.0. The issue arises when a crafted javascript: URL placed in the homepage field of a ".gemspec" file is processed, allowing an attacker to inject arbitrary web script. Public referenc...