This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2022-36036 | BDVDB-2026-183443 Detail

sjwallmdx-mermaid

Description#

mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when the component is loaded by MDXjs. This vulnerability was patched in version(s) 1.3.0 and 2.0.0-rc2. There are currently no known workarounds.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact none. Attack vector: local.

Weaknesses#

  • CWE-94 Improper Control of Generation of Code ('Code Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.