CVE-2021-28548: Buffer Copy without Checking Size of Input

Adobe Photoshop versions 21.2.6 and earlier and 22.3 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

CVE-2021-28549: Buffer Copy without Checking Size of Input

Adobe Photoshop versions 21.2.6 and earlier and 22.3 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...

PT-2021-3003

Name of the Vulnerable Software and Affected Versions Adobe Photoshop versions 21.2.6 and earlier Adobe Photoshop versions 22.3 and earlier Description The issue is related to a Buffer Overflow vulnerability when parsing a specially crafted file, which could allow an unauthenticated attacker to...

PT-2021-3004

Name of the Vulnerable Software and Affected Versions Adobe Photoshop versions 21.2.6 and earlier Adobe Photoshop versions 22.3 and earlier Description The issue is related to a Buffer Overflow when parsing a specially crafted file, which could allow an unauthenticated attacker to achieve arbitra...

Cross-Site Scripting in markdown-to-jsx

Versions of markdown-to-jsx prior to 6.11.4 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization the package may render output containing malicious JavaScript. This vulnerability can be exploited through input of links containing data or VBScript URIs and a base64-encode...

GHSA-CCRP-C664-8P4J Cross-Site Scripting in markdown-to-jsx

Versions of markdown-to-jsx prior to 6.11.4 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization the package may render output containing malicious JavaScript. This vulnerability can be exploited through input of links containing data or VBScript URIs and a base64-encode...

@codecademy/gamut (>=1.10.10-alpha.7c13cf.0, <=1.15.2), @contentful/field-editor-markdown (>=0.1.0, <=0.4.0) +18 more potentially affected by unknown CVE via markdown-to-jsx (>=6.4.1, <=6.11.1)

markdown-to-jsx NPM version =6.4.1, =1.10.10-alpha.7c13cf.0, =0.1.0, =0.1.0, =0.0.9, =7.1.0, =0.10.0, =1.0.0, =0.2.0, =0.1.0, =5.11.3, =5.8.9, =6.0.1, =1.0.0, =3.3.1-feather.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-CCRP-C664-8P4J...

@codecademy/gamut (>=1.10.10-alpha.7c13cf.0, <=1.15.2), @contentful/field-editor-markdown (>=0.1.0, <=0.4.0) +18 more potentially affected by unknown CVE via markdown-to-jsx (>=6.4.1, <=6.11.1)

markdown-to-jsx NPM version =6.4.1, =1.10.10-alpha.7c13cf.0, =0.1.0, =0.1.0, =0.0.9, =7.1.0, =0.10.0, =1.0.0, =0.2.0, =0.1.0, =5.11.3, =5.8.9, =6.0.1, =1.0.0, =3.3.1-feather.0 and more Source cves: unknown CVE Source advisory: GHSA-CCRP-C664-8P4J...

PT-2020-21234

Name of the Vulnerable Software and Affected Versions markdown-to-jsx versions prior to 6.11.4 Description The issue is related to Cross-Site Scripting due to insufficient input sanitization, allowing the package to render output containing malicious JavaScript. This can be exploited through inpu...

Cross-site Scripting (XSS)

markdown-to-jsx is vulnerable to cross-site scripting XSS. The attack exists because it does not sufficiently escape the input to the links containing data or VBScript URIs and a base64-encoded payload...

Cross-site Scripting (XSS)

markdown-to-jsx is vulnerable to cross-site scripting XSS attacks. The library does not properly convert tag names to lowercase before evaluating against the blacklist, allowing a malicious user to inject script and style tags by using uppercase letters...

Cross-Site Scripting

Overview Versions of markdown-to-jsx prior to 6.11.4 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization the package may render output containing malicious JavaScript. This vulnerability can be exploited through input of links containing data or VBScript URIs and a...

Adobe Photoshop JSX File ExtendScript Folder.rename Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

Adobe Photoshop JSX File ExtendScript File.writeln Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

Adobe Photoshop JSX File ExtendScript File.read Insufficient UI Warning Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

Adobe Photoshop JSX File ExtendScript File.execute Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

Adobe Photoshop JSX File ExtendScript app.system Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

Adobe Photoshop JSX File ExtendScript File.remove Insufficient UI Warning Denial-of-Service Vulnerability

This vulnerability allows remote attackers to trigger a denial-of-service condition on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Photoshop JSX File ExtendScript File.rename Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of th...

PT-2019-5900

Name of the Vulnerable Software and Affected Versions Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier Description The issue is related to a command injection vulnerability in Adobe Photoshop. Successful exploitation could lead to arbitrary code execution. The vulnerability i...