CVE-2023-0835

2023-04-0400:00:00

Fluid Attacks

www.cve.org

cve-2023-0835

external attacker

arbitrary local files

validation

markdown content

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.4%

JSON

markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "markdown-pdf",
    "versions": [
      {
        "version": "11.0.0",
        "status": "affected"
      }
    ]
  }
]