Lucene search
Veracode Vulnerability DatabaseVERACODE:7122HistoryJul 23, 2018 - 4:20 a.m.
Cross-site Scripting (XSS)
2018-07-2304:20:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
26.5%
markdown-pdf is vulnerable to cross-site scripting (XSS) attacks. The application does not properly sanitize user input, allowing a malicious user can pass a markdown file to the application to inject and execute arbitrary HTML code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| markdown-pdf | le | 8.1.1 | |
| markdown-pdf | le | 8.1.1 |
Related
prion
prion
Path traversal
2018-07-20 22:29:00
hackerone
hackerone
Node.js third-party modules: [markdown-pdf] Local file reading
2018-06-01 09:15:21
osv
osv
Remote Code Execution in markdown-pdf
2018-07-27 17:03:46
cvelist
cvelist
CVE-2018-3770
2018-07-20 00:00:00
github
github
Remote Code Execution in markdown-pdf
2018-07-27 17:03:46
cve
cve
CVE-2018-3770
2018-07-20 22:29:00
nvd
nvd
CVE-2018-3770
2018-07-20 22:29:00
nodejs
nodejs
Remote Code Execution
2019-06-18 23:26:52