Geminabox Project Geminabox
3 CVEs affecting Geminabox Project Geminabox. Latest disclosed: 2017-11-13. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14683 | High | 8.8 | 2017-09-25 | geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload. |
CVE-2017-16792 | Medium | 6.1 | 2017-11-13 | Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage"… |
CVE-2017-14506 | Medium | 5.4 | 2017-09-25 | geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file. |