CVE-2021-20745

high

Description

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

References

https://www.inkdrop.app/

https://jvn.jp/en/jp/JVN29949691/index.html

https://docs.inkdrop.app/releases/5.3.1

Details

Source: Mitre, NVD

Published: 2021-06-28

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H