CVE-2021-29475

🗓️ 26 Apr 2021 18:58:07Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 74 Views🌐 WEB

HedgeDoc allows attacker to receive arbitrary files via PDF export, fixed in version 1.5.0, suggest disabling PDF export or upgrading

Reporter	Title	Published	Views	Family All 10
CNNVD	Hedgedoc code-related vulnerabilities	26 Apr 202100:00	–	cnnvd
Cvelist	CVE-2021-29475 PDF export allows arbitrary file reads	26 Apr 202118:58	–	cvelist
EUVD	EUVD-2021-16083	7 Oct 202500:30	–	euvd
Mend	CVE-2021-29475	26 Apr 202118:58	–	mend
NVD	CVE-2021-29475	26 Apr 202119:15	–	nvd
osv_cve	CVE-2021-29475	26 Apr 202119:15	–	osv_cve
Prion	Code injection	26 Apr 202119:15	–	prion
Positive Technologies	PT-2021-18239 · Hedgedoc · Hedgedoc	26 Apr 202100:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2021-29475: Improper Control of Generation of Code	26 Apr 202100:00	–	rapid7
RedhatCVE	CVE-2021-29475	22 May 202521:23	–	redhatcve

NVD

Vulners

Node

hedgedoc hedgedocRange<1.5.0

[
  {
    "product": "hedgedoc",
    "vendor": "hedgedoc",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.5.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/hedgedoc/hedgedoc/commit/c1789474020a6d668d616464cb2da5e90e123f65
github	www.github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pxxg-px9v-6qf3

Parameter	Position	Path	Description	CWE
note_id	path	/export/pdf	An attacker can perform a local file disclosure by injecting `file:///` references into the note content, which are then processed by PhantomJS during the PDF export process.	CWE-918, CWE-94