CVE-2024-38353

CodiMD allows realtime collaborative markdown notes on all platforms. CodiMD before 2.5.4 is missing authentication and access control vulnerability allowing an unauthenticated attacker to gain unauthorised access to image data uploaded to CodiMD. CodiMD does not require valid authentication to access uploaded images or to upload new image data. An attacker who can determine an uploaded image's URL can gain unauthorised access to uploaded image data. Due to the insecure random filename generation in the underlying Formidable library, an attacker can determine the filenames for previously uploaded images and the likelihood of this issue being exploited is increased. This vulnerability is fixed in 2.5.4.

• CWE-338
• CWE-862

• https://github.com/hackmdio/codimd/security/advisories/GHSA-2764-jppc-p2hmExploit, Mitigation, Third Party Advisory
• https://github.com/hackmdio/codimd/security/advisories/GHSA-2764-jppc-p2hmExploit, Mitigation, Third Party Advisory

Published

Jul 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38345A cross-site request forgery vulnerability exists in Sola Te…8.1
• CVE-2024-38346The CloudStack cluster service runs on unauthenticated port …9.8
• CVE-2024-38347CodeProjects Health Care hospital Management System v1.0 was…8.8
• CVE-2024-38348CodeProjects Health Care hospital Management System v1.0 was…8.8
• CVE-2024-38351Pocketbase is an open source web backend written in go. In a…5.4
• CVE-2024-38352Rejected reason: CVE was assigned in error.
• CVE-2024-38354CodiMD allows realtime collaborative markdown notes on all p…6.1
• CVE-2024-38355Socket.IO is an open source, real-time, bidirectional, event…7.3
• CVE-2024-38356TinyMCE is an open source rich text editor. A cross-site scr…6.1
• CVE-2024-38357TinyMCE is an open source rich text editor. A cross-site scr…6.1
• CVE-2024-38358Wasmer is a web assembly (wasm) Runtime supporting WASIX, WA…2.9
• CVE-2024-38359The Lightning Network Daemon (lnd) - is a complete implement…6.5