← Back

Geminabox

geminabox

Vendor: Geminabox Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-16792
1Geminabox Project
1Geminabox
May 13, 2026
Nov 13, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and vie...Show more
Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.Show less
CVE-2017-14683
1Geminabox Project
1Geminabox
May 13, 2026
Sep 25, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.
CVE-2017-14506
1Geminabox Project
1Geminabox
May 13, 2026
Sep 25, 2017
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file.