Lucene search
Veracode Vulnerability DatabaseVERACODE:33283HistoryDec 13, 2021 - 3:06 a.m.
Remote Code Execution (RCE)
2021-12-1303:06:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
77
0.019 Low
EPSS
Percentile
88.6%
md-to-pdf is vulnerable to remote code execution. The library does not properly disable the JS engine in default when the library utilizing gray-matter to parse front matter content, allowing an attacker to execute the remote code through the JS engine.
Related
prion
prion
Remote code execution
2021-12-10 20:15:00
github
github
Code Injection in md-to-pdf.
2021-12-16 14:34:40
cvelist
cvelist
CVE-2021-23639 Remote Code Execution (RCE)
2021-12-10 00:00:00
osv
osv
CVE-2021-23639
2021-12-10 20:15:08
Code Injection in md-to-pdf.
2021-12-16 14:34:40
cve
cve
CVE-2021-23639
2021-12-10 20:15:08
nvd
nvd
CVE-2021-23639
2021-12-10 20:15:08