RubyGems/geminabox CVE-2017-14506: medium 5.4, EPSS 0.68%

Gem in a Box vulnerable to Cross-site Scripting

Action: Upgrade geminabox to 0.13.6 or later.

bundle update geminabox

Affected

Fixed versions

Sources

• osv: GHSA-98hq-3qvg-pg78
• https://nvd.nist.gov/vuln/detail/CVE-2017-14506
• https://github.com/geminabox/geminabox/commit/99aaae196c4fc6ae0df28e186ca1e493ae658e02
• https://github.com/geminabox/geminabox
• https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md
• http://baraktawily.blogspot.co.il/2017/09/gem-in-box-xss-vulenrability-cve-2017.html

CVE-2017-14506 · published 2022-05-13T01:31:05Z · modified 2023-11-08T03:58:55.553520Z · JSON