CVE-2023-44141

2023-10-3003:42:18

jpcert

www.cve.org

inkdrop v5.6.0

code injection

crafted markdown

0.001 Low

EPSS

Percentile

20.8%

JSON

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.

CNA Affected

[
  {
    "vendor": "Takuya Matsuyama",
    "product": "Inkdrop",
    "versions": [
      {
        "version": "prior to v5.6.0",
        "status": "affected"
      }
    ]
  }
]

References

forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211

jvn.jp/en/jp/JVN48057522/

www.inkdrop.app/

0.001 Low

EPSS

Percentile

20.8%

JSON

Related for CVELIST:CVE-2023-44141