5.1
Medium
CVE-2021-47839 Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts…
Description
Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened, potentially enabling remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Marky | 0.0.1 | No fix stated |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| Red Hat Satellite 6 | Versions not published |
References
- ExploitDB-49831 www.exploit-db.com
- Marky GitHub Repository github.com
- Proof of Concept Video imgur.com
- VulnCheck Advisory: Marky 0.0.1 - Persistent Cross-Site Scripting www.vulncheck.com
Timeline
- Published
- Last modified