Read the docs

hedgedoc

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

hedgedoc records in CISA KEV

No hedgedoc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hedgedoc 13 records HIGH

Records

13 records in Hedgedoc · all components

TI-2023-19867 CVE-2023-38487

HedgeDoc API allows to hide existing notes

Priority HIGH 69

HedgeDoc is software for creating real-time collaborative markdown notes.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00794 Published 2023-08-04 Fixed in 1.9.9 CWE-289
TI-2021-10188 CVE-2021-29475

PDF export allows arbitrary file reads

Priority MEDIUM 45

HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01158 Published 2021-04-26 Fixed in 1.5.0 CWE-918
TI-2020-16108 CVE-2020-26287

Stored XSS in mermaid diagrams

Priority MEDIUM 41

HedgeDoc is a collaborative platform for writing and sharing markdown.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.01464 Published 2020-12-28 Fixed in 1.7.1 CWE-79
TI-2021-16561 CVE-2021-39175

XSS vector in slide mode speaker-view

Priority LOW 36

HedgeDoc is a platform to write and share markdown.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00602 Published 2021-08-30 Fixed in 1.9.0 CWE-346
TI-2020-16107 CVE-2020-26286

Arbitary file upload

Priority LOW 36

HedgeDoc is a collaborative platform for writing and sharing markdown.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01437 Published 2020-12-28 Fixed in 1.7.1 CWE-434
TI-2021-04361 CVE-2021-21259

Stored XSS in slide mode

Priority LOW 35

HedgeDoc is open source software which lets you create real-time collaborative markdown notes.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.01369 Published 2021-01-22 Fixed in 1.7.2 CWE-79
TI-2022-08649 CVE-2022-24837

Enumerable upload file names in hedgedoc

Priority LOW 32

HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01126 Published 2022-04-11 Fixed in 1.9.3 CWE-200
Open these records in search →