CVE-2021-20745

2021-06-2800:50:33

jpcert

www.cve.org

0.001 Low

EPSS

Percentile

39.7%

JSON

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

CNA Affected

[
  {
    "product": "Inkdrop",
    "vendor": "Takuya Matsuyama",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to v5.3.1"
      }
    ]
  }
]

References

docs.inkdrop.app/releases/5.3.1

jvn.jp/en/jp/JVN29949691/index.html

www.inkdrop.app/

0.001 Low

EPSS

Percentile

39.7%

JSON

Related for CVELIST:CVE-2021-20745