5.1
Moyenne
CVE-2021-47839 Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts…
Description
Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened, potentially enabling remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Marky | 0.0.1 | Pas de correctif indiqué |
| Logging Subsystem for Red Hat OpenShift | Versions non publiées | |
| Red Hat Satellite 6 | Versions non publiées |
Références
- ExploitDB-49831 www.exploit-db.com
- Marky GitHub Repository github.com
- Proof of Concept Video imgur.com
- VulnCheck Advisory: Marky 0.0.1 - Persistent Cross-Site Scripting www.vulncheck.com
Chronologie
- Publiée
- Dernière modification