Lucene search
K

5 matches found

OSV
OSV
added 2017/11/16 1:47 a.m.13 views

GHSA-Q97V-764G-R2RP gollum and gollum-lib allow remote authenticated users to execute arbitrary code

The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string master is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...

8.8CVSS8.8AI score0.01195EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2017/11/16 1:47 a.m.21 views

gollum and gollum-lib allow remote authenticated users to execute arbitrary code

The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string master is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...

8.8CVSS8.7AI score0.01195EPSS
Exploits0References6Affected Software2
RubySec
RubySec
added 2017/11/16 12:0 a.m.12 views

gollum and gollum-lib allow remote authenticated users to execute arbitrary code

The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string master is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...

8.8CVSS7AI score0.01195EPSS
Exploits0References1Affected Software1
RubySec
RubySec
added 2017/11/16 12:0 a.m.16 views

gollum and gollum-lib allow remote authenticated users to execute arbitrary code

The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string master is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...

8.8CVSS7AI score0.01195EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2017/10/17 2:29 p.m.14 views

CVE-2014-9489

The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...

8.8CVSS8.8AI score0.01195EPSS
Exploits0References4
Rows per page
Query Builder