TI-2023-19867 CVE-2023-38487
HedgeDoc API allows to hide existing notes
Priority HIGH 69
HedgeDoc is software for creating real-time collaborative markdown notes.
hedgedoc
Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
hedgedoc records in CISA KEVNo hedgedoc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records
Priority MEDIUM 62
HedgeDoc is an open source, real-time, collaborative, markdown notes application.
TI-2021-10188 CVE-2021-29475
PDF export allows arbitrary file reads
Priority MEDIUM 45
HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor.
TI-2020-16108 CVE-2020-26287
Stored XSS in mermaid diagrams
Priority MEDIUM 41
HedgeDoc is a collaborative platform for writing and sharing markdown.
Priority LOW 37
HedgeDoc is an open source, real-time, collaborative, markdown notes application.
Priority LOW 37
HedgeDoc is a platform to write and share markdown.
TI-2026-42090 CVE-2026-58486
HedgeDoc: Denial-of-service via YAML alias expansion in note frontmatter
Priority LOW 36
HedgeDoc is an open source, real-time, collaborative, markdown notes application.
TI-2021-16561 CVE-2021-39175
XSS vector in slide mode speaker-view
Priority LOW 36
HedgeDoc is a platform to write and share markdown.
TI-2020-16107 CVE-2020-26286
Arbitary file upload
Priority LOW 36
HedgeDoc is a collaborative platform for writing and sharing markdown.
TI-2021-04361 CVE-2021-21259
Stored XSS in slide mode
Priority LOW 35
HedgeDoc is open source software which lets you create real-time collaborative markdown notes.
TI-2022-08649 CVE-2022-24837
Enumerable upload file names in hedgedoc
Priority LOW 32
HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor.
TI-2026-42093 CVE-2026-58489
HedgeDoc: CSRF in GitHub Gist export callback
Priority LOW 29
HedgeDoc is an open source, real-time collaborative markdown notes application.
TI-2021-10187 CVE-2021-29474
Relative Path Traversal Attack on note creation
Priority LOW 29
HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor.
Priority LOW 28
HedgeDoc is an open source, real-time, collaborative, markdown notes application.
Priority LOW 27
HedgeDoc is an open source, real-time, collaborative, markdown notes application.
Priority LOW 26
HedgeDoc is an open source, real-time collaborative markdown notes application.
Priority LOW 24
HedgeDoc is an open source, real-time, collaborative, markdown notes application.
Priority LOW 19
HedgeDoc is an open source, real-time, collaborative, markdown notes application.