Description
Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | gollum | >= 5.0, < 5.1.2 | 5.1.2 | GHSA-fj2w-qmjp-3rjm |
Medium · 6.1
CVE-2020-35305
EUVD-2022-6330GHSA-fj2w-qmjp-3rjm
Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog
Published Jul 15, 2022 · Updated Jul 9, 2026 · Assigned by mitre