CVE-2018-6806 Marked 2 through 2.5.11 allows remote attackers to read arbitrary files via a crafted HTML document that triggers a redirect to an x-marked://preview?text= URL. The value of the text parameter can inc...
MediumCVSS 6.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Marked 2 through 2.5.11 allows remote attackers to read arbitrary files via a crafted HTML document that triggers a redirect to an x-marked://preview?text= URL. The value of the text parameter can include arbitrary JavaScript code, e.g., making XMLHttpRequest calls.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| marked 2 project marked 2 | <= 2.5.11 | No fix listed |
References
- support.markedapp.com issue-tracking third-party-advisory
- www.lynxsecurity.io exploit third-party-advisory