Gem in a Box vulnerable to Cross-site Request Forgery

ALTO 8.8CVE-2017-14683 · GHSA-qwv2-2x8g-g43g · Published 25/09/2017 · updated 17/06/2026

In breve

CVE-2017-14683 è una vulnerabilità ALTO (CVSS 8.8) che riguarda geminabox, geminabox (geminabox project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 42.7% delle vulnerabilità.
Correzione: aggiornare a 0.13.7 o successiva.

Package	Affected versions	Patched versions
geminabox RubyGems	`< 0.13.7`	`0.13.7`
geminabox geminabox_project	`≤ 0.13.6`	No fix yet

geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.

NVD description

geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.