markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Fluid Attacks

Published: 2023-04-04T00:00:00

Updated: 2024-08-02T05:24:34.504Z

Reserved: 2023-02-14T00:00:00

Link: CVE-2023-0835

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-04-04T23:15:07.310

Modified: 2024-11-21T07:37:55.543

Link: CVE-2023-0835

cve-icon Redhat

No data.