Skip to content
OpenAdvisories

Vendor

hedgedoc

18 known vulnerabilities.

Products

hedgedoc 18
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2021-29475

    PDF export allows arbitrary file reads

    HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code injection has to take place as note content, there fore this …

    hedgedoc hedgedoc