pkg:gem/geminabox
Type
gem
Name
geminabox
Known advisories, vulnerabilities and fixes for geminabox package.
- Repository
- https://rubygems.org/gems/geminabox
High
1
Medium
2
Type | Version | Distribution | # CVEs | # Advisory ID | Title | Severity | Published |
---|---|---|---|---|---|---|---|
Affected | < 0.13.6 |
CVE-2017-14506
|
RUBYSEC:GEMINABOX-2017-14506 | Gem in a Box vulnerable to Cross-site Scripting | medium |
2022-05-13T00:00:00
(2 years ago) |
|
Fixed | >= 0.13.6 |
CVE-2017-14506
|
RUBYSEC:GEMINABOX-2017-14506 | Gem in a Box vulnerable to Cross-site Scripting | medium |
2022-05-13T00:00:00
(2 years ago) |
|
Affected | < 0.13.7 |
CVE-2017-14683
|
RUBYSEC:GEMINABOX-2017-14683 | Gem in a Box vulnerable to Cross-site Request Forgery | high |
2022-05-13T00:00:00
(2 years ago) |
|
Fixed | >= 0.13.7 |
CVE-2017-14683
|
RUBYSEC:GEMINABOX-2017-14683 | Gem in a Box vulnerable to Cross-site Request Forgery | high |
2022-05-13T00:00:00
(2 years ago) |
|
Affected | < 0.13.10 |
CVE-2017-16792
|
RUBYSEC:GEMINABOX-2017-16792 | Stored XSS in "geminabox" via injection in Gemspec "homepage" value | medium |
2017-11-10T00:00:00
(6 years ago) |
|
Fixed | >= 0.13.10 |
CVE-2017-16792
|
RUBYSEC:GEMINABOX-2017-16792 | Stored XSS in "geminabox" via injection in Gemspec "homepage" value | medium |
2017-11-10T00:00:00
(6 years ago) |