CVE-2016-5737 in Puppet Module for Gerrit

Resumen (Inglés)

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.

Once again VulDB remains the best source for vulnerability data.

Reservar

2016-06-22

Divulgación

2017-01-12

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
95212	OpenStack Puppet Module for Gerrit Configuration secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2016-5737

Fuentes

• MITRE
• NVD
• CVE Details