Arbitrary File Write via Code Injection in Markdown Preview Enhanced

Vulnerability Overview Vulnerability Name: [BUG] [Security Vulnerability] Arbitrary File Write via WaveDrom eval() Code Injection in Markdown Preview Enhanced #2315 Vulnerability Type: Code Injection Vulnerability Vulnerability Description: Markdown Preview Enhanced versions 0.8.x and the crossnote engine version 0.9.28 contain a code injection vulnerability. When a user opens a Markdown file containing a WaveDrom code block, the content of the code block is passed directly to without any sanitization, input validation, or Content Security Policy restrictions. Scope of Impact Affected Versions: Markdown Preview Enhanced 0.8.x and crossnote engine 0.9.28 Severity: HIGH Affected Files: - - - - Remediation Fixed Version: 0.8.28 Remediation Measures: The code injection vulnerability has been fixed, ensuring that code block content undergoes appropriate sanitization and validation. POC Code Exploitation Steps 1. Create a file named containing the following Markdown content: 2. Open the file in VS Code and preview it. 3. Verify that the file has been written to. Expected Output Screenshot !Screenshot Comments shd101wyy: Thank you! I will address this issue this weekend. shd101wyy: Fixed in the latest version 0.8.28. Please try it out. Thanks! ritikchadha: Confirmed that the latest version 0.8.28 fixes the issue. shd101wyy: Thank you! Feel free to submit security-related issues at https://github.com/shd101wyy/vscode-markdown-preview-enhanced/security/advisories. Alternatively, send an email to shd101wyy@gmail.com. Closure Status Closure Reason: Completed Closure Time: Last week

Goal Reached Thanks to every supporter — we hit 100%!

Arbitrary File Write via Code Injection in Markdown Preview Enhanced

More from this source