PT-2023-11541 · Unknown · Markdown-It

Name of the Vulnerable Software and Affected Versions: Markdown Edit affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the edit parameter of the webpage. This enables the attacker to perform unauthorized actions on the...

CVE-2020-19947

CVE-2020-19947 corresponds to a Cross Site Scripting vulnerability in Markdown Edit, enabling a remote attacker to execute arbitrary code through the webpage’s edit parameter . The core entry lists a CRITICAL CVSS v3.1 base score (9.6) with Network attack vector, no privileges required and user i...

Halo 代码问题漏洞

Halo is a personal blogging system for individual developers. A security vulnerability exists in Halo v1.6.1 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted .md files...

SUSE CVE-2023-26302

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...

SUSE CVE-2023-26303

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input...

CVE-2023-26303

A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with null assertations as input resulting in a crash and availability of the component...

CVE-2023-26302

A denial of service vulnerability exists in markdown-it-py.An attacker could craft a payload with invalid UTF-8 characters as input to cause a crash thereby affecting the availability...

CVE-2023-22462

Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text". The stored XSS vulnerability requires several user interactions in order to be...

Cross site scripting

Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text". The stored XSS vulnerability requires several user interactions in order to be...

Denial Of Service (DoS)

markdown-it-py is vulnerable to Denial Of Service DoS. The vulnerability exists in the convertfile function of parse.py, which allows an attacker to cause an application crash by submitting invalid UTF-8 characters when using the CLI version of markdown-it-py...

Text panel plugin XSS

Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin “Text”. The stored XSS vulnerability requires several user interactions in order to be...

CVE-2023-1005

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...

CVE-2023-1005

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...

Code injection

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...

CVE-2023-1005 JP1016 Markdown-Electron code injection

A vulnerability was found in JP1016 Markdown-Electron and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Continious delivery...

CVE-2023-1005

CVE-2023-1005 affects JP1016 Markdown-Electron. A vulnerability in unknown functionality enables code injection with local attack requirements; exploit disclosed publicly and no version details or updates are provided. Several sources reiterate lack of known fixed versions; remediation status is ...

Markdown Editor 代码注入漏洞

Markdown Editor is an Electron-based Markdown text editor. A code injection vulnerability exists in Markdown Editor. An attacker can exploit this vulnerability to inject arbitrary code...

PT-2023-16682 · Unknown · Jp1016 Markdown-Electron

Name of the Vulnerable Software and Affected Versions: JP1016 Markdown-Electron affected versions not specified Description: A critical issue was found in the software, affecting some unknown functionality, which leads to code injection when manipulated. The attack requires local access. The...

MarkText 代码注入漏洞

MarkText is a simple and elegant open source Markdown editor focused on speed and usability. A code injection vulnerability exists in MarkText version 0.17.1 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary code...

GHSA-JRWR-5X3P-HVC3 markdown-it-py Denial of Service vulnerability in the command line interface

Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input...