github_osv/GHSA-q97v-764g-r2rp
gollum and gollum-lib allow remote authenticated users to execute arbitrary code
The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string `master` is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the `-O` or `--open-files-in-pager` flags.
gitlab/gem/gollum/CVE-2014-9489
Improper Access Control
The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.
gitlab/gem/gollum-lib/CVE-2014-9489
Improper Access Control
The gollum-grit_adapter Ruby gem dependency in gollum and the gollum-lib gem dependency in gollum-lib when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or --open-files-in-pager flags.
ruby_advisory_db/gems/gollum/CVE-2014-9489
gollum and gollum-lib allow remote authenticated users to execute arbitrary code
The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and
the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string `master`
is in any of the wiki documents, allows remote authenticated users to execute arbitrary
code via the `-O` or `--open-files-in-pager` flags.
ruby_advisory_db/gems/gollum-lib/CVE-2014-9489
gollum and gollum-lib allow remote authenticated users to execute arbitrary code
The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and
the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string `master`
is in any of the wiki documents, allows remote authenticated users to execute arbitrary
code via the `-O` or `--open-files-in-pager` flags.