← CVE Intelligence

CVE-2023-0835

markdown-pdf 11.0.0 - Local File Read via Server Side XSS PUBLISHED

Description (CNA)

markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user.

Affected (CNA)

Vendor / productVersions
n/a / markdown-pdfaffected 11.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.