← All advisories

Moderate severityNVD Advisory· Published Jul 15, 2022· Updated Aug 4, 2024

CVE-2020-35305

CVE-2020-35305

Description

Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
gollumRubyGems	>= 5.0, < 5.1.2	5.1.2

Affected products

2

gollum/gollumdescription
ghsa-coords
pkg:gem/gollum
Range: >= 5.0, < 5.1.2

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-fj2w-qmjp-3rjmghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-35305ghsaADVISORY
gollum.comghsax_refsource_MISCWEB
github.com/gollum/gollum/commit/137728cdabc0f60859fcd30404ad2b8fff6ef715ghsaWEB
github.com/gollum/gollum/releases/tag/v5.1.2ghsax_refsource_MISCWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/gollum/CVE-2020-35305.ymlghsaWEB

News mentions

0

No linked articles in our index yet.