Lucene search
+L

7 matches found

NVD
NVD
•added 2026/07/13 10:16 p.m.•39 views

CVE-2026-58487

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

5.1CVSS0.00492EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/13 9:59 p.m.•14 views

CVE-2026-58487 HedgeDoc: Stored HTML injection via email local-part

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

5.1CVSS6AI score0.00492EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/13 9:59 p.m.•47 views

CVE-2026-58487 HedgeDoc: Stored HTML injection via email local-part

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

5.1CVSS0.00492EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/13 9:59 p.m.•11 views

CVE-2026-58487 HedgeDoc: Stored HTML injection via email local-part

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

5.1CVSS6.2AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2026/07/13 9:59 p.m.•14 views

CVE-2026-58487

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

5.1CVSS6.2AI score0.00492EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/07/13 9:59 p.m.•34 views

CVE-2026-58487

HedgeDoc before version 1.11.0 is vulnerable to stored HTML injection via the local-part of registered email addresses. An attacker could register a specially crafted email, reuse the local-part as the display name, and inject HTML into pages viewed by others (publish, slide views, and collaborat...

5.1CVSS6AI score0.00492EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•20 views

PT-2026-57912

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

5.1CVSS6.2AI score0.00492EPSS
SaveExploits0References2
Rows per page
Query Builder