CVE-2017-16833
15.11.2017, 09:29
Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.
| Vendor | Product | Version |
|---|---|---|
| gemirro_project | gemirro | 𝑥 < 0.16.0 |
𝑥
= Vulnerable software versions