CVE-2014-9489

The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in…

published October 17, 2017

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02941 · 87.0th percentile
Published
2017-10-17T14:00Z
EPSS history
Timeline
  • 17 OCT 14:00Z
    The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in…
    cvelistv5