Lucene search
Japan Vulnerability NotesJVN:27548431HistoryOct 02, 2015 - 12:00 a.m.
JVN#27548431: gollum vulnerable to file exposure
2015-10-0200:00:00
Japan Vulnerability Notes
jvn.jp
11
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.005
Percentile
76.4%
gollum is a wiki system that uses git repositories. gollum contains a vulnerability which may allow an attacker to view arbitrary files on the server.
Impact
A remote attacker may view arbitrary files on the server.
Solution
Update the Software
Update to the latest version according to the information provided by the developer.
Products Affected
- gollum v4.0.0 and earlier
Related
nvd
nvd
CVE-2015-7314
2015-10-06 01:59:32
osv
osv
Gollum Exposure of Sensitive Information
2018-08-28 22:33:51
cve
cve
CVE-2015-7314
2015-10-06 01:59:32
prion
prion
Design/Logic Flaw
2015-10-06 01:59:00
github
github
Gollum Exposure of Sensitive Information
2018-08-28 22:33:51
rubygems
rubygems
gollum Upload File Functionality Permits Arbitrary File Access
2015-09-19 21:00:00
cvelist
cvelist
CVE-2015-7314
2015-10-03 10:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.005
Percentile
76.4%
Related for JVN:27548431