system
Describe <CVE-2016-5737>.
user
What is <CVE-2016-5737>?
assistant
The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via a crafted review..