high7.8
CVE-2019-12138
MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.
Impact
MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macdown Project | Macdown | Version 0.7.1 |