Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Hedgedoc MEDIUM 6.1
CVE-2026-25642

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.6, files served below the /uploads/ endpoint did not …

Fix: 1.10.6+
Fix from $1,600 2026-02-06
Hedgedoc MEDIUM 6.5
CVE-2024-45308

HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to crea…

Fix: 1.10.0+
Fix from $1,600 2024-09-02
Hedgedoc HIGH 8.2
CVE-2023-38487

HedgeDoc is software for creating real-time collaborative markdown notes. Prior to version 1.9.9, the API of HedgeDoc 1 can be used to create notes w…

Fix: 1.9.9+
Fix from $1,950 2023-08-04
Hedgedoc MEDIUM 5.3
CVE-2022-24837

HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enum…

Fix: 1.9.3+
Fix from $1,600 2022-04-11
Hedgedoc MEDIUM 6.1
CVE-2021-39175

HedgeDoc is a platform to write and share markdown. In versions prior to 1.9.0, an unauthenticated attacker can inject arbitrary JavaScript into the …

Fix: 1.9.0+
Fix from $1,600 2021-08-30
Hedgedoc MEDIUM 6.1
CVE-2021-29503

HedgeDoc is a platform to write and share markdown. HedgeDoc before version 1.8.2 is vulnerable to a cross-site scripting attack using the YAML-metad…

Fix: 1.8.2+
Fix from $1,600 2021-05-19
Hedgedoc MEDIUM 5.8
CVE-2021-29474

HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's fil…

Fix: 1.8.0+
Fix from $1,600 2021-04-26
Hedgedoc CRITICAL 10.0
CVE-2021-29475

HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file sys…

Fix: 1.5.0+
Fix from $2,300 2021-04-26
Hedgedoc MEDIUM 6.1
CVE-2021-21259

HedgeDoc is open source software which lets you create real-time collaborative markdown notes. In HedgeDoc before version 1.7.2, an attacker can inje…

Fix: 1.7.2+
Fix from $1,600 2021-01-22
Hedgedoc HIGH 8.7
CVE-2020-26287

HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an attacker can inject arbitrary `script` tag…

Fix: 1.7.1+
Fix from $1,950 2020-12-29
Hedgedoc HIGH 7.5
CVE-2020-26286

HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an unauthenticated attacker can upload arbitr…

Fix: 1.7.1+
Fix from $1,950 2020-12-29