CVE Vulnerability

CVE-2022-24837

HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enumerable filename after the upload, resulting in potential information leakage of uploaded documents. This is especially relevant for private notes and affects all upload backends, except Lutim and imgur. This issue is patched in version 1.9.3 by replacing the filename generation with UUIDv4. If you cannot upgrade to HedgeDoc 1.9.3, it is possible to block POST requests to `/uploadimage`, which will disable future uploads.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

Scope

5.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-q6vv-2q26-j7rx Patch Third Party Advisory
https://github.com/node-formidable/formidable/issues/808 Issue Tracking Third Party Advisory
https://github.com/hedgedoc/hedgedoc/commit/9e2f9e21e904c4a319e84265da7ef03b0a8e343a Patch Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:hedgedoc:hedgedoc:*:*:*:*:*:*:*:*
Information

Published : 2022-04-11 09:15

Updated : 2022-04-19 03:30

NVD link : CVE-2022-24837

Mitre link : CVE-2022-24837

Products Affected
No products.
CWE
CWE-434