Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Macdown Project records in CISA KEVNo Macdown Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 44
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.0375 · Published 2019-05-17 · No fix listed CWE-22
Priority LOW 36
MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00856 · Published 2019-05-16 · No fix listed CWE-22
