PT-2022-25314 · Zettlr · Zettlr

Name of the Vulnerable Software and Affected Versions: Zettlr version 2.3.0 Description: The issue allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Zettlr. This is possible because the application does not...

CVE-2022-25204

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists...

@anemone/newline-use-comments (3.0.0), @elastic/docsmobile (>=0.0.0-verceltest.1, <=2.0.3-rc.1) +10 more potentially affected by CVE-2021-39199 via remark-html (13.0.1)

remark-html NPM version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on remark-html and may be impacted: - @anemone/newline-use-comments 3.0.0 - @elastic/docsmobile =0.0.0-verceltest.1, =1.3.6, =0.0.0, =0.0.2, =0.0.1, =0.0.2, =0.0.2, =7.0.0,...

Gitlab -- Multiple vulnerabilities

Gigtlab reports: Remote code execution via unsafe user-controlled markdown rendering options...

20190403-utils (1.0.0), 30s (>=0.1.0, <=1.3.3) +2467 more potentially affected by unknown CVE via marked (>=0.4.0, <=0.6.3)

marked NPM version =0.4.0, =0.1.0, =1.0.0, =4.13.7-rc4, =0.0.1, =0.1.0, =1.0.0, =0.1.0, =4.0.0, =1.0.0, =2.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CH52-VGQ2-943F...

Code injection

interfaces/markdown/input.vue in Directus 7 Application before 7.7.0 does not sanitize Markdown text before rendering a preview...

Node.js third-party modules: [harp] Unsafe rendering of Markdown files

I would like to report Cross Site Scripting vulnerablity in harp module It allows to execute arbitrary JavaScript due to unsafe rendering of markdown files. Similar to 404126 Module module name: harp version: 0.29.0 npm page: https://www.npmjs.com/package/harp Module Description zero-configuratio...

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow...

CVE-2018-14601

An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow...

CVE-2018-14601

An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow...

CVE-2018-14601

Removed by vendor...

GitLab CE and EE Denial of Service Vulnerabilities

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. A denial-of-service...

CVE-2018-14601: Undefined Security Weakness

An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. A Denial of Service can occur because Markdown rendering times are slow...