Lucene search
GoogleOSV:CVE-2022-0748HistoryMar 17, 2022 - 12:15 p.m.
CVE-2022-0748
2022-03-1712:15:07
Google
osv.dev
6
package
post-loader
vulnerable
arbitrary code execution
markdown parser
javascript
The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.
References
Related
prion
prion
Code injection
2022-03-17 12:15:00
github
github
Arbitrary code execution in post-loader
2022-03-18 00:01:11
cve
cve
CVE-2022-0748
2022-03-17 12:15:07
veracode
veracode
Remote Code Execution (RCE)
2022-03-18 01:58:09
cvelist
cvelist
CVE-2022-0748 Arbitrary Code Execution
2022-03-17 00:00:00
osv
osv
Arbitrary code execution in post-loader
2022-03-18 00:01:11
nvd
nvd
CVE-2022-0748
2022-03-17 12:15:07