Skip to content
OpenAdvisories

Package · RubyGems

geminabox

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2017-14683

    Gem in a Box vulnerable to Cross-site Request Forgery

    geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.

    geminabox RubyGems