high8.8
CVE-2019-12173
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element.
Impact
MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-2019-12138.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macdown Project | Macdown | Version 0.7.1 |