CVE-2015-7314
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-7314
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Gollum Precious模块信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gollum是一套基于Git（分布式版本控制系统）的维基（wiki）系统。 Gollum 4.0及之前版本的Precious模块中存在安全漏洞，该漏洞源于程序没有执行临时文件检查。远程攻击者可利用该漏洞读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-7314
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-7314
请登录查看更多情报信息。
- https://github.com/gollum/gollum/issues/1070x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2015-7314
Same Patch Batch · n/a · 2015-10-03 · 24 CVEs total
| CVE-2015-0988 | Omron CX-One CX-Programmer 信息泄露漏洞 | |
| CVE-2015-7686 | Perl Email-Address模块资源管理错误漏洞 | |
| CVE-2015-6549 | Symantec NetBackup OpsCenter 跨站脚本漏洞 | |
| CVE-2015-5650 | AjaXplorer 目录遍历漏洞 | |
| CVE-2015-5645 | ICZ MATCHA SNS 权限许可和访问控制漏洞 | |
| CVE-2015-5644 | ICZ MATCHA SNS 代码注入漏洞 | |
| CVE-2015-5643 | ICZ MATCHA INVOICE 代码注入漏洞 | |
| CVE-2015-5642 | ICZ MATCHA INVOICE SQL注入漏洞 | |
| CVE-2015-5641 | baserCMS SQL注入漏洞 | |
| CVE-2015-5640 | baserCMS 权限许可和访问控制问题漏洞 | |
| CVE-2015-3938 | Mitsubishi Electric MELSEC FX3G PLC设备资源管理错误漏洞 | |
| CVE-2015-1015 | 多款Omron设备信息泄露漏洞 | |
| CVE-2014-8916 | IBM OpenPages GRC Platform 跨站脚本漏洞 | |
| CVE-2015-0987 | 多款Omron产品信息泄露漏洞 | |
| CVE-2015-5651 | Dotclear 跨站脚本漏洞 | |
| CVE-2015-4955 | IBM Business Process Manager 跨站脚本漏洞 | |
| CVE-2015-1888 | IBM Content Navigator 跨站脚本漏洞 | |
| CVE-2015-0195 | IBM Content Template Catalog for WebSphere Portal 跨站脚本漏洞 | |
| CVE-2015-0145 | IBM OpenPages GRC Platform 跨站请求伪造漏洞 | |
| CVE-2015-0144 | IBM OpenPages GRC Platform 跨站脚本漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2015-7314
No comments yet