CVE-2020-35305
1 advisory.
RubyGems/gollum CVE-2020-35305: medium 6.1
Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog
Action: Upgrade gollum to 5.1.2 or later.
bundle update gollumAffected
| introduced | fixed | last affected |
|---|---|---|
| 5.0 | 5.1.2 | - |
Fixed versions
| 5.1.2 |
Sources
- osv: GHSA-fj2w-qmjp-3rjm
- https://nvd.nist.gov/vuln/detail/CVE-2020-35305
- https://github.com/gollum/gollum/commit/137728cdabc0f60859fcd30404ad2b8fff6ef715
- https://github.com/Szarny
- https://github.com/gollum
- https://github.com/gollum/gollum
- https://github.com/gollum/gollum/releases/tag/v5.1.2
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gollum/CVE-2020-35305.yml
- http://gollum.com
CVE-2020-35305 · published · modified · JSON