Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Inkdrop Component: Inkdrop Clear all filters
TI-2023-23681 CVE-2023-44141 · GHSA-j32p-mg32-5mfh

Code injection in Takuya Matsuyama Inkdrop

Priority LOW 36

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00311 Published 2023-10-30 Fixed in v5.6.0 CWE-94
TI-2021-03971 CVE-2021-20745 · GHSA-fgmm-f4rh-2m84

OS command injection in Takuya Matsuyama Inkdrop

Priority LOW 36

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00964 Published 2021-06-28 Fixed in v5.3.1 CWE-78