Medium severity6.1NVD Advisory· Published Jan 12, 2017· Updated Jun 17, 2026
CVE-2016-5737
CVE-2016-5737
Description
The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:openstack:puppet-gerrit:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:openstack:puppet-gerrit:-:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3- www.openwall.com/lists/oss-security/2016/06/22/2nvdIssue TrackingPatchThird Party Advisory
- github.com/openstack-infra/puppet-gerrit/commit/8573c2ee172f66c1667de49685c88fdc8883ca8bnvdIssue TrackingPatchThird Party Advisory
- www.securityfocus.com/bid/91352nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.