An issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file.

Published Jan 9, 2023 · Updated Apr 9, 2025 · Assigned by mitre