9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
71.6%
A Comrak AST can be constructed manually by a program instead of parsing a Markdown document with parse_document
. This AST can then be converted to HTML via html::format_document_with_plugins
. However, the HTML formatting code assumes that the AST is well-formed. For example, many AST notes contain [u8]
fields which the formatting code assumes is valid UTF-8 data. Several bugs can be triggered if this is not the case.
0.17.0 contains adjustments to the AST, storing strings instead of unvalidated byte arrays.
&[u8]
and Vec<u8>
fields in the AST.n/a
github.com/kivikakk/comrak
github.com/kivikakk/comrak/commit/9ff5f8df0ac951f5742d22a72c39b89a15f56639
github.com/kivikakk/comrak/releases/tag/0.17.0
github.com/kivikakk/comrak/security/advisories/GHSA-5r3x-p7xx-x6q5
lists.fedoraproject.org/archives/list/[email protected]/message/OUYME2VA555X6567H7ORIJQFN4BVGT6N
lists.fedoraproject.org/archives/list/[email protected]/message/PTWZWCT7KCX2KTXTLPUYZ3EHOONG4X46
lists.fedoraproject.org/archives/list/[email protected]/message/VQ3UBC7LE4VPCMZBTADIBL353CH7CPVV
nvd.nist.gov/vuln/detail/CVE-2023-28631