RubyGems/keynote CVE-2017-20159: medium 6.1, EPSS 0.74%

keynote Cross-site Scripting vulnerability

Action: Upgrade keynote to 1.0.0 or later.

bundle update keynote

Affected

Fixed versions

Sources

• osv: GHSA-399p-vq28-5hg8
• https://nvd.nist.gov/vuln/detail/CVE-2017-20159
• https://github.com/rf-/keynote/commit/05be4356b0a6ca7de48da926a9b997beb5ffeb4a
• https://github.com/rf-/keynote
• https://github.com/rf-/keynote/releases/tag/v1.0.0
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/keynote/CVE-2017-20159.yml
• https://vuldb.com/?ctiid.217142
• https://vuldb.com/?id.217142

CVE-2017-20159 · published 2022-12-31T12:30:20Z · modified 2023-11-08T03:59:17.509331Z · JSON