CVE-2022-41709

Published October 19th, 2022

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

Markdownify version 1.4.1 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the "nodeIntegration" option enabled.

amitmerchant1990/electron-markdownify

:closed_book: A minimal Markdown editor desktop app

GitHub

1.08K