FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-05-01 20:12:40 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
27b38d85-c891-11e7-a7bd-cd1209e563f2rubygem-geminabox -- XSS vulnerabilities

NVD reports:

Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.


Discovery 2017-11-13
Entry 2017-11-13
rubygem-geminabox
< 0.13.10

https://nvd.nist.gov/vuln/detail/CVE-2017-16792
CVE-2017-16792