Lucene search

CVE-2018-3770

🗓️ 20 Jul 2018 22:00:29Reported by [email protected]Type

Path traversal in markdown-pdf allows insertion of malicious HTML code for reading local file

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
Prion	Path traversal	20 Jul 201822:29	–	prion
Veracode	Cross-site Scripting (XSS)	23 Jul 201804:20	–	veracode
Hacker One	Node.js third-party modules: [markdown-pdf] Local file reading	1 Jun 201809:15	–	hackerone
OSV	Remote Code Execution in markdown-pdf	27 Jul 201817:03	–	osv
Cvelist	CVE-2018-3770	20 Jul 201822:00	–	cvelist
CVE	CVE-2018-3770	20 Jul 201822:29	–	cve
Github Security Blog	Remote Code Execution in markdown-pdf	27 Jul 201817:03	–	github
Node.js	Remote Code Execution	18 Jun 201923:26	–	nodejs

Nvd

Node

markdown-pdf_project markdown-pdfRange<9.0.0node.js

Source	Link
hackerone	www.hackerone.com/reports/360727

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Jul 2018 22:29Current

5.4Medium risk

Vulners AI Score5.4

CVSS22.1

CVSS35.5

EPSS0.0027

CWE-22