Lucene search
Veracode Vulnerability DatabaseVERACODE:5437HistoryNov 15, 2017 - 2:25 p.m.
Stored Cross-Site Scripting (XSS)
2017-11-1514:25:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
34.9%
gemirro is vulnerable to stored cross-site scripting (XSS) attacks. The attack is possible because the library does not escape the “homepage” value of a “.gemspec” file.
Related
rubygems
rubygems
Stored XSS in "gemirro" via injection in Gemspec "homepage" value
2017-07-10 21:00:00
cve
cve
CVE-2017-16833
2017-11-15 09:29:00
osv
osv
Gemirro Stored XSS in Gemspec "homepage" value
2017-11-29 23:19:51
CVE-2017-16833
2017-11-15 09:29:00
cvelist
cvelist
CVE-2017-16833
2017-11-15 09:00:00
github
github
Gemirro Stored XSS in Gemspec "homepage" value
2017-11-29 23:19:51
nvd
nvd
CVE-2017-16833
2017-11-15 09:29:00
prion
prion
Cross site scripting
2017-11-15 09:29:00