Geminabox Project

geminabox_project

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-16792 1Geminabox Project 1Geminabox May 13, 2026 Nov 13, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and vie...Show more Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script via the "homepage" value of a ".gemspec" file, related to views/gem.erb and views/index.erb.Show less
CVE-2017-14683 1Geminabox Project 1Geminabox May 13, 2026 Sep 25, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.
CVE-2017-14506 1Geminabox Project 1Geminabox May 13, 2026 Sep 25, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file.