CVE-2022-45025

2022-12-0702:15:10

CWE-78

[email protected]

web.nvd.nist.gov

command injection

vulnerability

markdown preview enhanced

vscode

atom

pdf

import

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.009 Low

EPSS

Percentile

82.7%

JSON

Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function.

Affected configurations

NVD

Node

markdown_preview_enhanced_projectmarkdown_preview_enhancedMatch0.6.5atom

markdown_preview_enhanced_projectmarkdown_preview_enhancedMatch0.6.5vscode

markdown_preview_enhanced_projectmarkdown_preview_enhancedMatch0.19.6atom

markdown_preview_enhanced_projectmarkdown_preview_enhancedMatch0.19.6vscode

CPENameOperatorVersion
markdown_preview_enhanced_project:markdown_preview_enhancedmarkdown preview enhanced project markdown preview enhancedeq0.6.5
markdown_preview_enhanced_project:markdown_preview_enhancedmarkdown preview enhanced project markdown preview enhancedeq0.19.6

CPE	Name	Operator	Version
markdown_preview_enhanced_project:markdown_preview_enhanced	markdown preview enhanced project markdown preview enhanced	eq	0.6.5
markdown_preview_enhanced_project:markdown_preview_enhanced	markdown preview enhanced project markdown preview enhanced	eq	0.19.6