Files
CVEs-PoC/2016/CVE-2016-5737.md
2025-09-29 21:09:30 +02:00

764 B

CVE-2016-5737

Description

The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.

POC

Reference

Github

No PoCs found on GitHub currently.