Lucene search

MitreCVE-2020-19947

HistoryMar 16, 2023 - 3:15 p.m.

CVE-2020-19947

2023-03-1615:15:09

CWE-79

mitre

web.nvd.nist.gov

cve-2020-19947

cross site scripting

markdown edit

remote code execution

nvd

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the webpage.

Affected configurations

Nvd

Node

markdown_edit_projectmarkdown_editMatch-

VendorProductVersionCPE
markdown_edit_projectmarkdown_edit-cpe:2.3:a:markdown_edit_project:markdown_edit:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
markdown_edit_project	markdown_edit	-	cpe:2.3:a:markdown_edit_project:markdown_edit:-:::::::*

References

github.com/georgeOsdDev/markdown-edit/issues/12

CVSS3

9.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

Related for CVE-2020-19947