CVE-2021-47839

Description

Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts into markdown files. Attackers can upload crafted markdown files with embedded JavaScript payloads that execute when the file is opened, potentially enabling remote code execution.

References

https://www.vulncheck.com/advisories/marky-persistent-cross-site-scripting

https://www.exploit-db.com/exploits/49831

https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-47839.json

https://imgur.com/a/qclfrUx

https://github.com/vesparny/marky

https://bugzilla.redhat.com/show_bug.cgi?id=2430451

https://access.redhat.com/security/cve/CVE-2021-47839

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4

EPSS