Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40131
HistoryApr 17, 2023 - 11:55 a.m.

Arbitrary File Read

2023-04-1711:55:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
arbitrary file read
markdown-pdf
validation
user input
attacker
local files
system

0.002 Low

EPSS

Percentile

56.4%

markdown-pdf is vulnerable to Arbitrary File Reads. The library does not properly validate the user input Markdown content, which allows an attacker to obtain arbitrary local files on the system.

CPENameOperatorVersion
markdown-pdfle11.0.0
markdown-pdfle11.0.0

0.002 Low

EPSS

Percentile

56.4%

Related for VERACODE:40131