@cjser/gulp-markdown-pdf (9.0.0-cjser.2), @codnx/mlxd (>=1.0.0, <=1.0.1) +22 more potentially affected by CVE-2023-0835 via markdown-pdf (11.0.0)

markdown-pdf NPM version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-pdf and may be impacted: - @cjser/gulp-markdown-pdf 9.0.0-cjser.2 - @codnx/mlxd =1.0.0, =1.2.151, =1.0.1, =2.0.0, =1.0.0, =1.1.2, =0.2.2, =0.0.7, =0.1.0 -...

@cjser/gulp-markdown-pdf (9.0.0-cjser.2), @codnx/mlxd (>=1.0.0, <=1.0.1) +22 more potentially affected by CVE-2023-0835 via markdown-pdf (11.0.0)

markdown-pdf NPM version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-pdf and may be impacted: - @cjser/gulp-markdown-pdf 9.0.0-cjser.2 - @codnx/mlxd =1.0.0, =1.2.151, =1.0.1, =2.0.0, =1.0.0, =1.1.2, =0.2.2, =0.0.7, =0.1.0 -...

CVE-2023-0835

markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...

CVE-2023-0835 markdown-pdf 11.0.0 - Local File Read via Server Side XSS

markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...

CVE-2023-0835 markdown-pdf 11.0.0 - Local File Read via Server Side XSS

markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...

CVE-2023-0835

CVE-2023-0835 affects markdown-pdf 11.0.0, where an external attacker can remotely read arbitrary local files due to the application’s failure to validate user-supplied Markdown content. The root cause is lack of input validation in the Markdown processing path, enabling sensitive file exposure v...