CVE-2021-39175
Last modified
CVE-2021-39175 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. HedgeDoc is a platform to write and share markdown. In versions prior to 1.9.0, an unauthenticated attacker can inject arbitrary JavaScript into the speaker-notes of the slide-mode feature by embedding an iframe hosting the malicious code into the slides or by embedding the HedgeDoc instance into another page. EPSS estimates a 0.60% chance of exploitation in the next 30 days.
Description
HedgeDoc is a platform to write and share markdown. In versions prior to 1.9.0, an unauthenticated attacker can inject arbitrary JavaScript into the speaker-notes of the slide-mode feature by embedding an iframe hosting the malicious code into the slides or by embedding the HedgeDoc instance into another page. The problem is patched in version 1.9.0. There are no known workarounds aside from upgrading.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hedgedoc | Hedgedoc | < 1.9.0 |
References
- https://github.com/hedgedoc/hedgedoc/pull/1369Patch, Third Party Advisory
- https://github.com/hedgedoc/hedgedoc/pull/1375Patch, Third Party Advisory
- https://github.com/hedgedoc/hedgedoc/pull/1513Patch, Third Party Advisory
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-j748-779h-9697Patch, Third Party Advisory
- https://github.com/hedgedoc/hedgedoc/pull/1369Patch, Third Party Advisory
- https://github.com/hedgedoc/hedgedoc/pull/1375Patch, Third Party Advisory
- https://github.com/hedgedoc/hedgedoc/pull/1513Patch, Third Party Advisory
- https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-j748-779h-9697Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-39175?
How severe is CVE-2021-39175?
How do I fix CVE-2021-39175?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-3917A flaw was found in the coreos-installer, where it writes th…5.5
- CVE-2021-39170Pimcore is an open source data & experience management platf…5.4
- CVE-2021-39171Passport-SAML is a SAML 2.0 authentication provider for Pass…7.5
- CVE-2021-39172Cachet is an open source status page system. Prior to versio…8.8
- CVE-2021-39173Cachet is an open source status page system. Prior to versio…8.8
- CVE-2021-39174Cachet is an open source status page system. Prior to versio…8.8
- CVE-2021-39176detect-character-encoding is a package for detecting charact…7.5
- CVE-2021-39177Geyser is a bridge between Minecraft: Bedrock Edition and Mi…9.8
- CVE-2021-39178Next.js is a React framework. Versions of Next.js between 10…6.1
- CVE-2021-39179DHIS 2 is an information system for data capture, management…8.8
- CVE-2021-3918json-schema is vulnerable to Improperly Controlled Modificat…9.8
- CVE-2021-39180OpenOLAT is a web-based learning management system (LMS). A …8.8
Are you affected by CVE-2021-39175?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST