{"id":"CVE-2023-44141","state":"PUBLISHED","title":"Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.","description":"Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.","publishedAt":"2023-10-30T03:42:18.099Z","updatedAt":"2024-09-06T20:49:59.976Z","severity":null,"assigner":"jpcert","products":["Takuya Matsuyama Inkdrop"],"affected":[{"vendor":"Takuya Matsuyama","product":"Inkdrop","versions":[{"version":"prior to v5.6.0","status":"affected"}]}],"references":["https://www.inkdrop.app/","https://forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211","https://jvn.jp/en/jp/JVN48057522/"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/44xxx/CVE-2023-44141.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-44141","state":"PUBLISHED","datePublished":"2023-10-30T03:42:18.099Z","dateUpdated":"2024-09-06T20:49:59.976Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2023-09-26T06:46:01.793Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file."}],"affected":[{"vendor":"Takuya Matsuyama","product":"Inkdrop","versions":[{"version":"prior to v5.6.0","status":"affected"}]}],"references":[{"url":"https://www.inkdrop.app/"},{"url":"https://forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211"},{"url":"https://jvn.jp/en/jp/JVN48057522/"}],"problemTypes":[{"descriptions":[{"description":"Code injection","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2023-10-30T03:42:18.099Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.inkdrop.app/","tags":["x_transferred"]},{"url":"https://forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211","tags":["x_transferred"]},{"url":"https://jvn.jp/en/jp/JVN48057522/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T19:59:51.474Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-06T20:49:27.836758Z","id":"CVE-2023-44141","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-06T20:49:59.976Z"}}]}}}