CVE-2021-20745

OS Command Injection in Inkdrop

Inkdrop における OS コマンドインジェクション

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

Disclosure Date

2021/06/22

Credit

Eiji Mori (@ei01241)

CWE

  • CWE-78

Product URLs

Reference

Back