CVE-2023-0835 — markdown-pdf 11.0.0 - Local File Read via Server Side XSS
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content…
Published: 2023-04-04 · CVSS: 8.2 · CVSS 3.1
markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the Markdown content entered by the user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7