PT-2017-15287 · Marp · Marp

Keitaro Yamazaki · Published 2017-07-07 · Updated 2020-04-29 · CVE-2017-2239

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Marp versions v0.0.10 and earlier

Description The issue may allow an attacker to access local resources and files using JavaScript.

Recommendations For Marp versions v0.0.10 and earlier, update to a version later than v0.0.10 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-2239

Affected Products

Marp

References · 3

• https://osv.dev/vulnerability/CVE-2017-2239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2239 · Security Note
• http://jvn.jp/en/jp/JVN21174546/index.html · Note