Description
The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.
Unscored
CVE-2016-5737
EUVD-2016-6672GHSA-jj3m-6359-8pjg
The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which…
Published Jan 12, 2017 · Updated Aug 6, 2024 · Assigned by mitre