Lucene search

MitreCVE-2022-46603

HistoryJan 09, 2023 - 11:15 p.m.

CVE-2022-46603

2023-01-0923:15:27

CWE-79

mitre

web.nvd.nist.gov

inkdrop

cve-2022-46603

arbitrary command execution

security vulnerability

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

42.9%

JSON

An issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file.

Affected configurations

Nvd

Node

inkdropinkdropMatch5.4.1

VendorProductVersionCPE
inkdropinkdrop5.4.1cpe:2.3:a:inkdrop:inkdrop:5.4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
inkdrop	inkdrop	5.4.1	cpe:2.3:a:inkdrop:inkdrop:5.4.1:::::::*

References

github.com/10cks/inkdropPoc

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

42.9%

JSON

Related for CVE-2022-46603