CVE-2018-3770

A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files.

Score

CVSS 3.1 5.5 Medium

Status

Modified - support@hackerone.com

Published

2018-07-20

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Markdown-pdf (Hackerone)
• Markdown-pdf (Markdown-pdf Project)

References

• https://hackerone.com/reports/360727