CVE-2023-53940
Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
概要
Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system commands by crafting a malicious markdown file. Attackers can embed a video source with an onerror event that executes shell commands through Node.js child_process module when the file is opened.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com