yuriisanin/CVE-2022-45025

This is stars and forks stats for /yuriisanin/CVE-2022-45025 repository. As of 12 May, 2024 this repository has 89 stars and 19 forks.

CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom) Description The Mume markdown tool library was vulnerable to command injection due to use of spawn command with {shell: true} option. This could allow an attacker to achieve arbitary code execution by tricking victim into opening specially crafted Markdown file using VSCode or Atom. The library powers Markdown Preview Enhanced plugin for both VSCode and Atom. Vulnerable code snippet: const task = spawn( ...