Vulnerabilities > CVE-2021-23639 - Unspecified vulnerability in Markdown to PDF Project Markdown to PDF

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

markdown-to-pdf-project

NVD

Published: 2021-12-10

Updated: 2021-12-14

Summary

The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine.

Vulnerable Configurations

Part	Description	Count
Application	Markdown_To_Pdf_Project Markdown TO PDF Project Markdown TO PDF 1.0.0 Markdown TO PDF Project Markdown TO PDF 1.0.1 Markdown TO PDF Project Markdown TO PDF 1.0.2 Markdown TO PDF Project Markdown TO PDF 1.1.0 Markdown TO PDF Project Markdown TO PDF 1.2.0 Markdown TO PDF Project Markdown TO PDF 1.2.1 Markdown TO PDF Project Markdown TO PDF 2.0.0 Markdown TO PDF Project Markdown TO PDF 2.0.1 Markdown TO PDF Project Markdown TO PDF 2.1.0 Markdown TO PDF Project Markdown TO PDF 2.1.1 Markdown TO PDF Project Markdown TO PDF 2.1.2 Markdown TO PDF Project Markdown TO PDF 2.1.3 Markdown TO PDF Project Markdown TO PDF 2.1.4 Markdown TO PDF Project Markdown TO PDF 2.1.5 Markdown TO PDF Project Markdown TO PDF 2.2.0 Markdown TO PDF Project Markdown TO PDF 2.3.0 Markdown TO PDF Project Markdown TO PDF 2.3.1 Markdown TO PDF Project Markdown TO PDF 2.3.2 Markdown TO PDF Project Markdown TO PDF 2.4.0 Markdown TO PDF Project Markdown TO PDF 2.4.1 Markdown TO PDF Project Markdown TO PDF 2.4.2 Markdown TO PDF Project Markdown TO PDF 2.5.0 Markdown TO PDF Project Markdown TO PDF 2.6.1 Markdown TO PDF Project Markdown TO PDF 2.6.2 Markdown TO PDF Project Markdown TO PDF 2.6.3 Markdown TO PDF Project Markdown TO PDF 2.6.4 Markdown TO PDF Project Markdown TO PDF 2.7.0 Markdown TO PDF Project Markdown TO PDF 2.7.1 Markdown TO PDF Project Markdown TO PDF 2.8.0 Markdown TO PDF Project Markdown TO PDF 2.8.1 Markdown TO PDF Project Markdown TO PDF 2.8.2 Markdown TO PDF Project Markdown TO PDF 3.0.0 Markdown TO PDF Project Markdown TO PDF 3.0.1 Markdown TO PDF Project Markdown TO PDF 3.1.0 Markdown TO PDF Project Markdown TO PDF 3.1.1 Markdown TO PDF Project Markdown TO PDF 3.1.2 Markdown TO PDF Project Markdown TO PDF 3.2.0 Markdown TO PDF Project Markdown TO PDF 3.2.1 Markdown TO PDF Project Markdown TO PDF 3.3.0 Markdown TO PDF Project Markdown TO PDF 3.3.1 Markdown TO PDF Project Markdown TO PDF 3.3.2 Markdown TO PDF Project Markdown TO PDF 4.0.0 Markdown TO PDF Project Markdown TO PDF 4.0.1 Markdown TO PDF Project Markdown TO PDF 4.1.0	46

Summary

Vulnerable Configurations

References