Description
An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/mindoc-org/mindoc | <= 2.1-beta.5 | — | GHSA-f7ff-xf87-f22q |