CVE-2023-44141

2023-10-3004:15:10

CWE-94

[email protected]

web.nvd.nist.gov

inkdrop

v5.6.0

code injection

vulnerability

crafted markdown file

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.1%

JSON

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.

Affected configurations

Nvd

Node

inkdropinkdropRange<5.6.0

inkdropinkdropMatch5.6.0beta0

inkdropinkdropMatch5.6.0beta1

inkdropinkdropMatch5.6.0beta2

inkdropinkdropMatch5.6.0beta3

inkdropinkdropMatch5.6.0beta4

VendorProductVersionCPE
inkdropinkdrop*cpe:2.3:a:inkdrop:inkdrop:*:*:*:*:*:*:*:*
inkdropinkdrop5.6.0cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta0:*:*:*:*:*:*
inkdropinkdrop5.6.0cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta1:*:*:*:*:*:*
inkdropinkdrop5.6.0cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta2:*:*:*:*:*:*
inkdropinkdrop5.6.0cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta3:*:*:*:*:*:*
inkdropinkdrop5.6.0cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta4:*:*:*:*:*:*

Vendor	Product	Version	CPE
inkdrop	inkdrop	*	cpe:2.3:a:inkdrop:inkdrop::::::::
inkdrop	inkdrop	5.6.0	cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta0::::::
inkdrop	inkdrop	5.6.0	cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta1::::::
inkdrop	inkdrop	5.6.0	cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta2::::::
inkdrop	inkdrop	5.6.0	cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta3::::::
inkdrop	inkdrop	5.6.0	cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta4::::::