RubyGems/geminabox CVE-2017-16792: medium 6.1, EPSS 1.08%

Geminabox contains Cross-site Scripting

Action: Upgrade geminabox to 0.13.10 or later.

bundle update geminabox

Affected

Fixed versions

Sources

• osv: GHSA-653m-r33x-39ff
• https://nvd.nist.gov/vuln/detail/CVE-2017-16792
• https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7
• https://github.com/geminabox/geminabox
• https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md
• https://rubygems.org/gems/geminabox/versions/0.13.10

CVE-2017-16792 · published 2017-11-29T23:20:14Z · modified 2023-11-08T03:59:13.670724Z · JSON