Lucene search
+L

1 matches found

OSV
OSV
added 2017/11/16 1:47 a.m.26 views

GHSA-Q97V-764G-R2RP gollum and gollum-lib allow remote authenticated users to execute arbitrary code

The gollum-gritadapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string master is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags...

8.8CVSS8.8AI score0.02292EPSS
SaveExploits0References6
Rows per page
Query Builder