Markdown Pdf Project
markdown-pdf_project
2 CVEs • 1 product
Products (1)
Click to collapseToggle
Products (1)
Click to collapse
CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user. |
1Markdown Pdf Project 1Markdown Pdf Nov 21, 2024 Jul 20, 2018 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files. |