Description
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138.
Unscored
CVE-2019-12173
EUVD-2019-3822GHSA-r63g-rwmc-75w3
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is d…
Published May 17, 2019 · Updated Aug 4, 2024 · Assigned by mitre