MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/MacDownApp/macdown/issues/1076 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2019-05-16T13:21:06
Updated: 2024-08-04T23:10:30.598Z
Reserved: 2019-05-16T00:00:00
Link: CVE-2019-12138
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-05-16T14:29:00.513
Modified: 2019-05-16T19:26:13.847
Link: CVE-2019-12138
Redhat
No data.