Markdown-pdf Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Markdown-pdf Project records in CISA KEV

No Markdown-pdf Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Markdown-pdf · all components

TI-2023-00791 CVE-2023-0835 · GHSA-qghr-877h-f9jh

HIGH 69

markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00597 Published 2023-04-04 No fix listed CWE-79

TI-2018-02764 CVE-2018-3770 · GHSA-p7c9-jqhq-vr3v

LOW 25

A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00501 Published 2018-07-20 Fixed in 9.0.0 CWE-22