7.8
Élevée
CVE-2022-41709 Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to…
Description
Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Markdownify | 1.4.1 | Pas de correctif indiqué |