CVE-2023-53940
Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
Summary
Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
Original description
The description as published by the source.
Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system commands by crafting a malicious markdown file. Attackers can embed a video source with an onerror event that executes shell commands through Node.js child_process module when the file is opened.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com