205 matches found
PT-2024-38547
Name of the Vulnerable Software and Affected Versions: yzane vscode-markdown-pdf version 1.5.0 Description: A problematic issue was found in the software, affecting an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...
CVE-2024-7739: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in yzane vscode-markdown-pdf 1.5.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...
CVE-2024-7738: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality of the component Markdown File Handler. The manipulation leads to pathname traversal. Attacking locally is a requirement. The exploit has...
Arbitrary File Read
markdown-pdf is vulnerable to Arbitrary File Reads. The library does not properly validate the user input Markdown content, which allows an attacker to obtain arbitrary local files on the system...
GHSA-QGHR-877H-F9JH markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...
CVE-2023-0835
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...
markdown-pdf 跨站脚本漏洞
npm markdown-pdf is the United States npm a Markdown file will be converted to PDF node module. A security vulnerability exists in markdown-pdf version 11.0.0, which stems from an application that does not validate user-entered Markdown content, resulting in an attacker being able to obtain local...
CVE-2023-0835 markdown-pdf 11.0.0 - Local File Read via Server Side XSS
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...
PT-2023-16559 · Unknown · Markdown-Pdf
Name of the Vulnerable Software and Affected Versions: markdown-pdf version 11.0.0 Description: The issue allows an external attacker to remotely obtain arbitrary local files due to the application's failure to validate the Markdown content entered by the user. Recommendations: For markdown-pdf...
CVE-2023-0835
CVE-2023-0835 affects markdown-pdf 11.0.0, where an external attacker can remotely read arbitrary local files due to the application’s failure to validate user-supplied Markdown content. The root cause is lack of input validation in the Markdown processing path, enabling sensitive file exposure v...
CVE-2023-0835
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...
CVE-2023-0835: Improper Neutralization of Input During Web Page Generation
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user...
Remote Code Execution
Overview Versions of markdown-pdf prior to 9.0.0 are vulnerable to Remote Code Execution. The package fails to sanitize HTML code in markdown files. If markdown files with malicious HTML are converted to PDF, the resulting PDF file will execute any JavaScript code in the original markdown file...
GHSA-P7C9-JQHQ-VR3V Remote Code Execution in markdown-pdf
Versions of markdown-pdf prior to 9.0.0 are vulnerable to Remote Code Execution. The package fails to sanitize HTML code in markdown files. If markdown files with malicious HTML are converted to PDF, the resulting PDF file will execute any JavaScript code in the original markdown file. This may...
Remote Code Execution in markdown-pdf
Versions of markdown-pdf prior to 9.0.0 are vulnerable to Remote Code Execution. The package fails to sanitize HTML code in markdown files. If markdown files with malicious HTML are converted to PDF, the resulting PDF file will execute any JavaScript code in the original markdown file. This may...
Cross-site Scripting (XSS)
markdown-pdf is vulnerable to cross-site scripting XSS attacks. The application does not properly sanitize user input, allowing a malicious user can pass a markdown file to the application to inject and execute arbitrary HTML code...
CVE-2018-3770
A path traversal exists in markdown-pdf version 9.0.0 that allows a user to insert a malicious html code that can result in reading the local files...
Path traversal
A path traversal exists in markdown-pdf version 9.0.0 that allows a user to insert a malicious html code that can result in reading the local files...
