Design/Logic Flaw

2021-06-2801:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

39.7%

JSON

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

CPENameOperatorVersion
inkdroplt5.3.1

CPE	Name	Operator	Version
	inkdrop	lt	5.3.1

References

docs.inkdrop.app/releases/5.3.1

jvn.jp/en/jp/JVN29949691/index.html

www.inkdrop.app/

0.001 Low

EPSS

Percentile

39.7%

JSON

Related for PRION:CVE-2021-20745