~ / search / GHSA-f7ff-xf87-f22q

GHSA-f7ff-xf87-f22q

Arbitrary command execution in Minidoc

Source: GitHub Advisory Database (reviewed) High CVE-2022-29637

Packages

EcosystemPackageAffectedFixed in
Go github.com/mindoc-org/mindoc <= 2.1-beta.5 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.

References

External links from the advisory. They lead to third-party sites.