Executive brief
Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog
Affected products
- RubyGems gollum
Junglewise Threat Intelligence
CVE-2020-35305 · Severity: low · CVSS 3.1 · Published 2022-07-16
Technologies: gollum (RubyGems). Vendors: RubyGems.
Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog