PT-2018-13493 · Pandao · Editor.Md

Hackd0G · Publicado 2018-09-02 · Atualizado 2018-10-25 · CVE-2018-16330

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Pandao Editor.md version 1.5.0

Description The issue allows for XSS attacks through crafted attributes of an invalid IMG element.

Recommendations For version 1.5.0, update to a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-16330

GHSA-VJCJ-5G2R-VXQC

Produtos afetados

Editor.Md

Referências · 6

• 🔥 https://github.com/pandao/editor.md/issues/612 · Exploit
• https://github.com/pandao/editor.md · Nota
• https://osv.dev/vulnerability/CVE-2018-16330 · Aviso do Fabricante
• https://github.com/advisories/GHSA-vjcj-5g2r-vxqc · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-16330 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-vjcj-5g2r-vxqc · Aviso do Fabricante