CVEs-PoC/2021/CVE-2021-29996.md

CVE-2021-29996

Description

Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload.

POC

Reference

• https://github.com/marktext/marktext/issues/2548

Github

• https://github.com/EdgeSecurityTeam/Vulnerability
• https://github.com/tzwlhack/Vulnerability