CVE-2023-44141

Опубликовано: 30 окт. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.

Ссылки

https://forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211
Release Notes
https://jvn.jp/en/jp/JVN48057522/
Third Party Advisory
https://www.inkdrop.app/
Product
https://forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211
Release Notes
https://jvn.jp/en/jp/JVN48057522/
Third Party Advisory
https://www.inkdrop.app/
Product

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:inkdrop:inkdrop:*:*:*:*:*:*:*:*

Версия до 5.6.0 (исключая)

cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta0:*:*:*:*:*:*

cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta1:*:*:*:*:*:*

cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta2:*:*:*:*:*:*

cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta3:*:*:*:*:*:*

cpe:2.3:a:inkdrop:inkdrop:5.6.0:beta4:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00047

Низкий

7.8 High

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-j32p-mg32-5mfh