Lucene search
PRIOn knowledge basePRION:CVE-2014-9489HistoryOct 17, 2017 - 2:29 p.m.
Code injection
2017-10-1714:29:00
PRIOn knowledge base
www.prio-n.com
6
The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string “master” is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gollum | le | 3.1.0 | |
| gollum-lib | le | 4.0.0 | |
| grit_adapter | le | 0.1.0 |
Related
cvelist
cvelist
CVE-2014-9489
2017-10-17 14:00:00
cve
cve
CVE-2014-9489
2017-10-17 14:29:00
github
github
osv
osv
nvd
nvd
CVE-2014-9489
2017-10-17 14:29:00