CVE-2017-16833
EUVD-2017-035615.11.2017, 09:29
Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gemirro_project | gemirro | 𝑥 < 0.16.0 |
𝑥
= Vulnerable software versions