CVE-2016-10531
Medium
Description
marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content injection protection (`sanitize: true`) to inject a `javascript:` URL. This flaw exists because `&#xNNanything;` gets parsed to what it could and leaves the rest behind, resulting in just `anything;` being left.
SeverityMedium
CVSS6.1
Exploit probability—
Product
Marked
PublishedMay 31, 2018
First seenMay 31, 2018
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- marked0.3.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| marked_project marked | v ≤ 0.3.5 | — |
| markednpm | v < 0.3.6 | 0.3.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.