CVE-2016-5737

Published: 2017-01-12T23:59Z

Last Modified: 2024-11-21T02:54Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt