Junglewise Threat Intelligence

CVE-2020-35305: Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog

CVE-2020-35305 · Severity: low · CVSS 3.1 · Published 2022-07-16

Technologies: gollum (RubyGems). Vendors: RubyGems.

Executive brief

Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog

Affected products

  • RubyGems gollum

Related threats