PT-2018-17138 · Markdown2 · Markdown2

Vin01 · Published 2018-01-18 · Updated 2024-07-12 · CVE-2018-5773

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: markdown2 versions through 2.3.5

Description: The issue concerns a flaw in the safe mode feature of markdown2, which is intended to sanitize user input against XSS attacks. However, this feature does not properly escape input, allowing for the potential triggering of XSS with a crafted payload. This can be demonstrated by omitting the final > character from an IMG tag, showcasing the feature's inability to correctly handle such input.

Recommendations: For versions through 2.3.5, consider disabling the safe mode feature until a proper fix is available, as it does not provide the intended protection against XSS attacks. Additionally, restricting user input to prevent the inclusion of potentially malicious HTML tags, such as IMG tags without a closing >, can help minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-5773

GHSA-P6H9-GW49-RQM4

OPENSUSE-SU-2024:11237-1

OPENSUSE-SU-2024:14146-1

PYSEC-2018-13

Affected Products

Markdown2

References · 16

• https://osv.dev/vulnerability/PYSEC-2018-13 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14146-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5773 · Security Note
• https://osv.dev/vulnerability/CVE-2018-5773 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p6h9-gw49-rqm4 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11237-1 · Vendor Advisory
• https://github.com/trentm/python-markdown2/commit/1b1dcdd727c0ef03453b9f5ef5ae3679f1d72323 · Note
• https://github.com/trentm/python-markdown2/pull/303 · Note
• https://github.com/trentm/python-markdown2/blob/master/CHANGES.md#python-markdown2-236 · Note
• https://github.com/trentm/python-markdown2 · Note
• https://github.com/trentm/python-markdown2/issues/285 · Note
• https://github.com/google/osv/issues/430 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/markdown2/PYSEC-2018-13.yaml · Note
• https://suse.com/security/cve/CVE-2021-26813 · Note
• https://suse.com/security/cve/CVE-2018-5773 · Note