CVE-2015-3295

markdown-it before 4.1.0 does not block data: URLs.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:markdown-it_project:markdown-it:4.0.3:*:*:*:*:*:*:*

History

21 Nov 2024, 02:29

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2015/04/10/10 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2015/04/10/10 - Mailing List, Third Party Advisory
References () http://www.securityfocus.com/bid/71824 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/71824 - Third Party Advisory, VDB Entry
References () https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3 - Issue Tracking, Patch, Third Party Advisory () https://github.com/markdown-it/markdown-it/commit/f76d3beb46abd121892a2e2e5c78376354c214e3 - Issue Tracking, Patch, Third Party Advisory

Information

Published : 2017-06-07 21:29

Updated : 2024-11-21 02:29


NVD link : CVE-2015-3295

Mitre link : CVE-2015-3295

CVE.ORG link : CVE-2015-3295


JSON object : View

Products Affected

markdown-it_project

  • markdown-it
CWE
CWE-284

Improper Access Control