{"action":"Upgrade geminabox to 0.13.10 or later.","affected":[{"fixed":"0.13.10","introduced":"0"}],"component":"geminabox","cve_ids":["CVE-2017-16792"],"ecosystem":"RubyGems","epss":0.01084,"exploited":false,"fixed_versions":["0.13.10"],"ghsa_id":"GHSA-653m-r33x-39ff","id":"tcs_01M5KEH7ADMB1BEZA2AHSYS9XT","modified_at":"2023-11-08T03:59:13.670724Z","published_at":"2017-11-29T23:20:14Z","references":["https://osv.dev/vulnerability/GHSA-653m-r33x-39ff","https://nvd.nist.gov/vuln/detail/CVE-2017-16792","https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7","https://github.com/geminabox/geminabox","https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md","https://rubygems.org/gems/geminabox/versions/0.13.10"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-653m-r33x-39ff","url":"https://osv.dev/vulnerability/GHSA-653m-r33x-39ff"}],"summary":"Geminabox contains Cross-site Scripting"}