CVE-2017-14683

geminabox (aka Gem in a Box) before 0.13.7 has CSRF, as demonstrated by an unintended gem upload.

Source: CVE-2017-14683