CVE-2021-20745

Summary

Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.

Affected Software

Weaknesses

• OS Command Injection

ADP Enrichment

CVE Program Container

Additional References

• https://www.inkdrop.app/
• https://docs.inkdrop.app/releases/5.3.1
• https://jvn.jp/en/jp/JVN29949691/index.html

References

• https://www.inkdrop.app/
• https://docs.inkdrop.app/releases/5.3.1
• https://jvn.jp/en/jp/JVN29949691/index.html

• ←Previous
• Next→