Lucene search
+L

4764 matches found

Hacker One
Hacker One
added 2020/04/01 10:46 p.m.94 views

GitLab: Stored XSS in markdown when redacting references

Summary It's possible to inject arbitrary html into the markdown by abusing the ReferenceRedactorFilter. This is due to the data-original attribute allowing html encoded data to be stored, which is then extracted and used as the link content. If the original data already is html encoded then it...

0.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2020/03/04 11:39 p.m.3 views

libtool (>=0.0.2 <=1.1.0), pycellga (>=0.1.0 <=0.3.0) potentially affected by unknown CVE via markdown-editor (=1.0.7)

markdown-editor PYPI version =1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-editor and may be impacted: - libtool =0.0.2, =0.1.0, =0.3.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-MARKDOWNEDITOR-559226...

5.8AI score
SaveExploits0
Snyk
Snyk
added 2020/03/04 11:39 p.m.3 views

Cross-site Scripting (XSS)

Overview Markdown-Editor is a Standalone editor for your local markdown files. Affected versions of this package are vulnerable to Cross-site Scripting XSS. Markdown and HTML provided to the editor is written as HTML within markdownedit.js without any output encoding. PoC by Snyk Security Team...

4.3CVSS5.2AI score
SaveExploits0References2
OSV
OSV
added 2020/03/02 8:15 p.m.6 views

CVE-2018-19658

The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote...

5.4CVSS5.8AI score0.00521EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/02 8:15 p.m.16 views

CVE-2018-19658

The Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote...

5.4CVSS5.3AI score0.00521EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/02/25 4:56 a.m.14 views

Cross-Site Scripting (XSS)

discord-markdown is vulnerable to cross-site scripting XSS. The markdown is not properly sanitized, allowing injection of arbitrary Javascript into any website using discord-markdown with user-generated markdown...

1.5AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2020/02/24 5:34 p.m.71 views

discord-html not escaping HTML code blocks when lacking a language identifier

Impact Any website using discord-markdown with user-generated markdown is vulnerable to having code injected into the page where the markdown is displayed. Patches This has been patched in version 2.3.1 Workarounds Escape the characters & before sending plain code blocks to discord-markdown...

1.2AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/02/24 5:34 p.m.16 views

GHSA-9R27-994C-4XCH discord-html not escaping HTML code blocks when lacking a language identifier

Impact Any website using discord-markdown with user-generated markdown is vulnerable to having code injected into the page where the markdown is displayed. Patches This has been patched in version 2.3.1 Workarounds Escape the characters & before sending plain code blocks to discord-markdown...

7.2AI score
SaveExploits0References3
Veracode
Veracode
added 2020/02/18 1:17 a.m.13 views

HTML Injection

marky-markdown is vulnerable to HTML Injection. The vulnerability exists as it improperly validates style attribute in img tag, allowing an attacker to pass malicious value...

2.7AI score
SaveExploits0
Veracode
Veracode
added 2020/02/17 1:40 a.m.15 views

HTML Injection

marky-markdown is vulnerable to HTML Injection. The vulnerability exists as it improperly validates youtube.com as the source value of the iframes. An attacker is able to pass in a value such as youtube.com.evil.com and bypass the validation...

1.8AI score
SaveExploits0
Node.js
Node.js
added 2020/02/14 10:15 p.m.14 views

HTML Injection

Overview All versions of marky-markdown are vulnerable to HTML Injection due to a validation bypass. The package only allows iframes where the source is youtube.com but it is possible to bypass the validation with sources where youtube.com is the sub-domain, such as youtube.com.evil.co. This...

7.2AI score
SaveExploits0Affected Software1
Node.js
Node.js
added 2020/02/14 10:11 p.m.16 views

HTML Injection

Overview All versions of marky-markdown are vulnerable to HTML Injection. The package fails to sanitize style attributes in img tags of the markdown input. This may allow attackers to affect the size of images in the rendered HTML. Recommendation This package is no longer maintained. Please upgra...

6.7AI score
SaveExploits0Affected Software1
Snyk
Snyk
added 2020/02/13 2:54 p.m.2 views

Cross-site Scripting (XSS)

Overview written is a rich Markdown editor for the web. Note: This package is deprecated EOL Affected versions of this package are vulnerable to Cross-site Scripting XSS. When parsing and converting markdown into HTML, it is possible to inject malicious JavaScript elements that can result in XSS...

6.5CVSS6.4AI score
SaveExploits0References2
NVD
NVD
added 2020/02/03 5:15 p.m.23 views

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

6.1CVSS6.6AI score0.01436EPSS
SaveExploits1References2
OSV
OSV
added 2020/02/03 5:15 p.m.18 views

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

6.1CVSS6.8AI score
SaveExploits0References2
Prion
Prion
added 2020/02/03 5:15 p.m.11 views

Design/Logic Flaw

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

4.3CVSS6.5AI score0.01436EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/02/03 4:32 p.m.27 views

CVE-2020-8548

massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution because nodeIntegration in webPreferences is true...

6.6AI score0.01436EPSS
SaveExploits1References2
Node.js
Node.js
added 2020/01/30 8:32 p.m.13 views

Cross-Site Scripting

Overview All versions of markdown-it-katex are vulnerable to Cross-Site Scripting XSS. The package fails to properly escape error messages, which may allow attackers to execute arbitrary JavaScript in a victim's browser by triggering an error. Recommendation No fix is currently available. Conside...

6.7AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2019/12/23 12:0 a.m.4 views

GitLab Resource Management Error Vulnerability (CNVD-2020-03053)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A resource management error vulnerability exists in GitLa...

6.5CVSS6.7AI score0.01198EPSS
SaveExploits1References1
NVD
NVD
added 2019/12/20 10:15 p.m.23 views

CVE-2019-15584

A denial of service exists in gitlab v12.3.2, v12.2.6, and v12.1.10 that would let an attacker bypass input validation in markdown fields take down the affected page...

6.5CVSS6.4AI score0.01198EPSS
SaveExploits1References1
Rows per page
Query Builder