Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-nrwf-zegu-ebhs
Summary
Geminabox contains Cross-site Scripting
Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.
Aliases
0
alias CVE-2017-16792
1
alias GHSA-653m-r33x-39ff
Fixed_packages
0
url pkg:gem/geminabox@0.13.10
purl pkg:gem/geminabox@0.13.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.10
Affected_packages
0
url pkg:gem/geminabox@0.1.0
purl pkg:gem/geminabox@0.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.1.0
1
url pkg:gem/geminabox@0.2.0
purl pkg:gem/geminabox@0.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.0
2
url pkg:gem/geminabox@0.2.1
purl pkg:gem/geminabox@0.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.1
3
url pkg:gem/geminabox@0.2.2
purl pkg:gem/geminabox@0.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.2
4
url pkg:gem/geminabox@0.2.3
purl pkg:gem/geminabox@0.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.3
5
url pkg:gem/geminabox@0.2.4
purl pkg:gem/geminabox@0.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.4
6
url pkg:gem/geminabox@0.2.5
purl pkg:gem/geminabox@0.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.5
7
url pkg:gem/geminabox@0.2.6
purl pkg:gem/geminabox@0.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.6
8
url pkg:gem/geminabox@0.2.7
purl pkg:gem/geminabox@0.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.7
9
url pkg:gem/geminabox@0.2.8
purl pkg:gem/geminabox@0.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.8
10
url pkg:gem/geminabox@0.2.9.pre1
purl pkg:gem/geminabox@0.2.9.pre1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.9.pre1
11
url pkg:gem/geminabox@0.2.9
purl pkg:gem/geminabox@0.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.9
12
url pkg:gem/geminabox@0.2.10
purl pkg:gem/geminabox@0.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.10
13
url pkg:gem/geminabox@0.2.11
purl pkg:gem/geminabox@0.2.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.11
14
url pkg:gem/geminabox@0.2.13
purl pkg:gem/geminabox@0.2.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.13
15
url pkg:gem/geminabox@0.2.14
purl pkg:gem/geminabox@0.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.14
16
url pkg:gem/geminabox@0.2.15
purl pkg:gem/geminabox@0.2.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.2.15
17
url pkg:gem/geminabox@0.3.0
purl pkg:gem/geminabox@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.3.0
18
url pkg:gem/geminabox@0.3.1
purl pkg:gem/geminabox@0.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.3.1
19
url pkg:gem/geminabox@0.3.2
purl pkg:gem/geminabox@0.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.3.2
20
url pkg:gem/geminabox@0.3.3
purl pkg:gem/geminabox@0.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.3.3
21
url pkg:gem/geminabox@0.4.0
purl pkg:gem/geminabox@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.4.0
22
url pkg:gem/geminabox@0.5.0
purl pkg:gem/geminabox@0.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.5.0
23
url pkg:gem/geminabox@0.5.1
purl pkg:gem/geminabox@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.5.1
24
url pkg:gem/geminabox@0.5.2
purl pkg:gem/geminabox@0.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.5.2
25
url pkg:gem/geminabox@0.6.0
purl pkg:gem/geminabox@0.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.6.0
26
url pkg:gem/geminabox@0.6.1pre1
purl pkg:gem/geminabox@0.6.1pre1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.6.1pre1
27
url pkg:gem/geminabox@0.6.1
purl pkg:gem/geminabox@0.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.6.1
28
url pkg:gem/geminabox@0.7.0
purl pkg:gem/geminabox@0.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.7.0
29
url pkg:gem/geminabox@0.8.0
purl pkg:gem/geminabox@0.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.8.0
30
url pkg:gem/geminabox@0.9.0
purl pkg:gem/geminabox@0.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.9.0
31
url pkg:gem/geminabox@0.10.0
purl pkg:gem/geminabox@0.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.10.0
32
url pkg:gem/geminabox@0.10.1
purl pkg:gem/geminabox@0.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.10.1
33
url pkg:gem/geminabox@0.11.0
purl pkg:gem/geminabox@0.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.11.0
34
url pkg:gem/geminabox@0.11.1
purl pkg:gem/geminabox@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.11.1
35
url pkg:gem/geminabox@0.12.0
purl pkg:gem/geminabox@0.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.12.0
36
url pkg:gem/geminabox@0.12.1
purl pkg:gem/geminabox@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.12.1
37
url pkg:gem/geminabox@0.12.2
purl pkg:gem/geminabox@0.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.12.2
38
url pkg:gem/geminabox@0.12.3
purl pkg:gem/geminabox@0.12.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.12.3
39
url pkg:gem/geminabox@0.12.4
purl pkg:gem/geminabox@0.12.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.12.4
40
url pkg:gem/geminabox@0.13.0
purl pkg:gem/geminabox@0.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.0
41
url pkg:gem/geminabox@0.13.1
purl pkg:gem/geminabox@0.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.1
42
url pkg:gem/geminabox@0.13.2
purl pkg:gem/geminabox@0.13.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.2
43
url pkg:gem/geminabox@0.13.3
purl pkg:gem/geminabox@0.13.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.3
44
url pkg:gem/geminabox@0.13.4
purl pkg:gem/geminabox@0.13.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.4
45
url pkg:gem/geminabox@0.13.5
purl pkg:gem/geminabox@0.13.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-qdkg-sx1j-v7b7
2
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.5
46
url pkg:gem/geminabox@0.13.6
purl pkg:gem/geminabox@0.13.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
1
vulnerability VCID-y5ky-h79e-tfb8
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.6
47
url pkg:gem/geminabox@0.13.7
purl pkg:gem/geminabox@0.13.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.7
48
url pkg:gem/geminabox@0.13.8
purl pkg:gem/geminabox@0.13.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.8
49
url pkg:gem/geminabox@0.13.9
purl pkg:gem/geminabox@0.13.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nrwf-zegu-ebhs
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/geminabox@0.13.9
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-16792
reference_id
reference_type
scores
0
value 0.00361
scoring_system epss
scoring_elements 0.5849
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-16792
1
reference_url https://github.com/geminabox/geminabox
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/geminabox/geminabox
2
reference_url https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md
3
reference_url https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md#01310-2017-11-13
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements
url https://github.com/geminabox/geminabox/blob/master/CHANGELOG.md#01310-2017-11-13
4
reference_url https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/geminabox/geminabox/commit/f8429a9e364658459add170e4ebc7a5d3b4759e7
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-16792
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-16792
6
reference_url https://rubygems.org/gems/geminabox/versions/0.13.10
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://rubygems.org/gems/geminabox/versions/0.13.10
7
reference_url https://github.com/advisories/GHSA-653m-r33x-39ff
reference_id GHSA-653m-r33x-39ff
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-653m-r33x-39ff
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-nrwf-zegu-ebhs