openstack-infra/puppet-gerrit

openstack-infra/puppet-gerrit

GitHubGitHub
GitHubgithub.com
Releases0
Stars23
MOVED: Now at https://opendev.org/opendev/puppet-gerrit
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2016-5737↗
—4.3 MEDIUM

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.