Vendors / Inkdrop Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Inkdrop records in CISA KEV No Inkdrop vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
An issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0102 · Published 2023-01-09 · No fix listed CWE-79
Priority LOW 36
Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00311 · Published 2023-10-30 · Fixed in v5.6.0 CWE-94
Priority LOW 36
Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00964 · Published 2021-06-28 · Fixed in v5.3.1 CWE-78
Open these records in search → All records by CVSS severity
0 2 2 0 0
