PT-2025-17963 · Codimd · Codimd

Ninjagptop · Published 2025-04-26 · Updated 2025-10-28 · CVE-2025-46654

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CodiMD versions 2.2.0 and earlier

Description The issue concerns a bypass of the Content Security Policy (CSP) protection mechanism against Cross-Site Scripting (XSS) attacks. This can be achieved by uploading a .html file that references an uploaded .js file, thus allowing the execution of malicious JavaScript content.

Recommendations For versions 2.2.0 and earlier, as a temporary workaround, consider restricting the upload of .html and .js files to minimize the risk of exploitation. Additionally, restrict access to the file upload feature to authorized users only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-424

Related Identifiers

CVE-2025-46654

Affected Products

Codimd

References · 12

• 🔥 https://github.com/hackmdio/codimd/issues/1910 · Exploit
• 🔥 https://github.com/zast-ai/vulnerability-reports/blob/main/formidable/file_upload/report.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-46654 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46654 · Vendor Advisory
• https://twitter.com/dailycve/status/1934749737191686276 · Twitter Post
• https://twitter.com/CVETracker/status/1916583314271412345 · Twitter Post
• https://twitter.com/CVEnew/status/1916233428367782009 · Twitter Post
• https://t.me/cvenotify/119920 · Telegram Post
• https://t.me/cveNotify/130930 · Telegram Post
• https://t.me/cvedetector/23809 · Telegram Post
• https://t.me/cvetracker/22424 · Telegram Post
• https://twitter.com/zast_ai/status/1983192145982042283 · Twitter Post