cve/2016/CVE-2016-5737.md
2024-06-18 02:51:15 +02:00

753 B

CVE-2016-5737

Description

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.

POC

Reference

Github

No PoCs found on GitHub currently.