{"id":"CVE-2020-35305","details":"Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the 'New Page' dialog.","aliases":["GHSA-fj2w-qmjp-3rjm"],"modified":"2026-08-14T09:05:36.955770Z","published":"2022-07-15T14:15:09.343Z","references":[{"type":"WEB","url":"https://github.com/Szarny/"},{"type":"ADVISORY","url":"https://github.com/gollum/"},{"type":"ADVISORY","url":"https://github.com/gollum/gollum/releases/tag/v5.1.2"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gollum/gollum","events":[{"introduced":"0eee014a8bf987d1dca1abdd521e6df48438eb0b"},{"last_affected":"bfbfb21c177f5f6219b9f1c48b459448742ca909"},{"fixed":"bfbfb21c177f5f6219b9f1c48b459448742ca909"}],"database_specific":{"cpe":"cpe:2.3:a:gollum_project:gollum:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.0.0"},{"last_affected":"5.1.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v5.1.2","v5.1.1","v5.1","v5.0.1","v5.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35305.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}