CVE-2017-20159
1 advisory.
RubyGems/keynote CVE-2017-20159: medium 6.1
keynote Cross-site Scripting vulnerability
Action: Upgrade keynote to 1.0.0 or later.
bundle update keynoteAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: GHSA-399p-vq28-5hg8
- https://nvd.nist.gov/vuln/detail/CVE-2017-20159
- https://github.com/rf-/keynote/commit/05be4356b0a6ca7de48da926a9b997beb5ffeb4a
- https://github.com/rf-/keynote
- https://github.com/rf-/keynote/releases/tag/v1.0.0
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/keynote/CVE-2017-20159.yml
- https://vuldb.com/?ctiid.217142
- https://vuldb.com/?id.217142
CVE-2017-20159 · published · modified · JSON