PT-2019-13758 · Editor.Md · Editor.Md

Ry0Tak · Publicado 2019-08-03 · Atualizado 2019-08-23 · CVE-2019-14653

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Editor.md version 1.5.0

Description The issue allows for XSS via an attribute of an ABBR or SUP element.

Recommendations For version 1.5.0, update to a newer version that contains a fix for this issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-14653

GHSA-X65C-4FGJ-5FC3

Produtos afetados

Editor.Md

Referências · 4

• 🔥 https://github.com/pandao/editor.md/issues/715 · Exploit
• https://osv.dev/vulnerability/CVE-2019-14653 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-x65c-4fgj-5fc3 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14653 · Nota de Segurança