CVE-2017-16833

Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the…

published November 15, 2017

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00814 · 56.6th percentile
Published
2017-11-15T09:00Z
EPSS history
Timeline
  • 15 NOV 09:00Z
    Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the…
    cvelistv5