Gem in a Box vulnerable to Cross-site Request Forgery

ALTO 8.8CVE-2017-14683 · GHSA-qwv2-2x8g-g43g · Published 25/09/2017 · updated 17/06/2026

Em resumo

CVE-2017-14683 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta geminabox, geminabox (geminabox project).
Chance de exploração nos próximos 30 dias (EPSS): 0.50%, maior que 42.7% das vulnerabilidades.
Correção: atualize para 0.13.7 ou posterior.

Package	Affected versions	Patched versions
geminabox RubyGems	`< 0.13.7`	`0.13.7`
geminabox geminabox_project	`≤ 0.13.6`	No fix yet

geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.

NVD description

geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.