CVE-2022-29637
Arbitrary command execution in Minidoc
Summary
Arbitrary command execution in Minidoc
Original description
The description as published by the source.
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/mindoc-org/mindoc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.1-beta.5"}]}]
References
- advisory nvd.nist.gov
- package github.com/mindoc-org/mindoc
- web github.com