CVE-2023-53940
Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
Résumé
Codigo Markdown Editor 1.0.1 Electron Arbitrary Code Execution via Markdown File
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Codigo Markdown Editor 1.0.1 contains a code execution vulnerability that allows attackers to run arbitrary system commands by crafting a malicious markdown file. Attackers can embed a video source with an onerror event that executes shell commands through Node.js child_process module when the file is opened.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com