Vulnerabilities > CVE-2021-23639 - Unspecified vulnerability in Markdown to PDF Project Markdown to PDF

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

markdown-to-pdf-project

critical

NVD

Published: 2021-12-10

Updated: 2024-11-21

Summary

The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

Vulnerable Configurations

Part	Description	Count
Application	Markdown_To_Pdf_Project Markdown TO PDF Project Markdown TO PDF 1.0.0 Markdown TO PDF Project Markdown TO PDF 1.0.1 Markdown TO PDF Project Markdown TO PDF 1.0.2 Markdown TO PDF Project Markdown TO PDF 1.1.0 Markdown TO PDF Project Markdown TO PDF 1.2.0 Markdown TO PDF Project Markdown TO PDF 1.2.1 Markdown TO PDF Project Markdown TO PDF 2.0.0 Markdown TO PDF Project Markdown TO PDF 2.0.1 Markdown TO PDF Project Markdown TO PDF 2.1.0 Markdown TO PDF Project Markdown TO PDF 2.1.1 Markdown TO PDF Project Markdown TO PDF 2.1.2 Markdown TO PDF Project Markdown TO PDF 2.1.3 Markdown TO PDF Project Markdown TO PDF 2.1.4 Markdown TO PDF Project Markdown TO PDF 2.1.5 Markdown TO PDF Project Markdown TO PDF 2.2.0 Markdown TO PDF Project Markdown TO PDF 2.3.0 Markdown TO PDF Project Markdown TO PDF 2.3.1 Markdown TO PDF Project Markdown TO PDF 2.3.2 Markdown TO PDF Project Markdown TO PDF 2.4.0 Markdown TO PDF Project Markdown TO PDF 2.4.1 Markdown TO PDF Project Markdown TO PDF 2.4.2 Markdown TO PDF Project Markdown TO PDF 2.5.0 Markdown TO PDF Project Markdown TO PDF 2.6.1 Markdown TO PDF Project Markdown TO PDF 2.6.2 Markdown TO PDF Project Markdown TO PDF 2.6.3 Markdown TO PDF Project Markdown TO PDF 2.6.4 Markdown TO PDF Project Markdown TO PDF 2.7.0 Markdown TO PDF Project Markdown TO PDF 2.7.1 Markdown TO PDF Project Markdown TO PDF 2.8.0 Markdown TO PDF Project Markdown TO PDF 2.8.1 Markdown TO PDF Project Markdown TO PDF 2.8.2 Markdown TO PDF Project Markdown TO PDF 3.0.0 Markdown TO PDF Project Markdown TO PDF 3.0.1 Markdown TO PDF Project Markdown TO PDF 3.1.0 Markdown TO PDF Project Markdown TO PDF 3.1.1 Markdown TO PDF Project Markdown TO PDF 3.1.2 Markdown TO PDF Project Markdown TO PDF 3.2.0 Markdown TO PDF Project Markdown TO PDF 3.2.1 Markdown TO PDF Project Markdown TO PDF 3.3.0 Markdown TO PDF Project Markdown TO PDF 3.3.1 Markdown TO PDF Project Markdown TO PDF 3.3.2 Markdown TO PDF Project Markdown TO PDF 4.0.0 Markdown TO PDF Project Markdown TO PDF 4.0.1 Markdown TO PDF Project Markdown TO PDF 4.1.0	46

Summary

Vulnerable Configurations

References