Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-28834

Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.4%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 6.8
References
Products affected by CVE-2021-28834


Contact Us

Shodan ® - All rights reserved