CVE-2017-14683

Published September 25th, 2017

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.

geminabox/geminabox

Really simple rubygem hosting

GitHub

1.55K