CVE-2014-9489

Published October 17th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.5

MEDIUM

Affected

PROJECTS

Description

The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.

gollum/grit_adapter

Adapter for Gollum to use Grit at the backend

GitHub

gollum/gollum

A simple, Git-powered wiki with a local frontend and support for many kinds of markup and content.

GitHub

14.3K