~ / search / GHSA-584h-jhxh-pxp2

GHSA-584h-jhxh-pxp2

Codiad remote code execution vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2018-14009

Packages

EcosystemPackageAffectedFixed in
Packagist codiad/codiad <= 2.8.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

References

External links from the advisory. They lead to third-party sites.