{"timestamp":"2025-04-23T13:31:08.425379Z","id":"CVE-2018-1000874","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-79

https://github.com/cebe/markdown/issues/166

https://github.com/cebe/markdown/issues/166#issuecomment-508230493

MITRE disputed

** DISPUTED ** PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a three backtick wrapped payload with a character in front: L: "```<script>alert();</script>```". NOTE: This has been argued as a non-issue (see references) since it is not the parser's job to sanitize malicious code from a parsed document.

PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a three backtick wrapped payload with a character in front: L: "```<script>alert();</script>```". NOTE: This has been argued as a non-issue (see references) since it is not the parser's job to sanitize malicious code from a parsed document

https://github.com/cebe/markdown/issues/166#issuecomment-508230493 [No Types Assigned]

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

CWE-79

OR
     *cpe:2.3:a:cebe:markdown:*:*:*:*:*:*:*:* versions up to (including) 1.2.0

https://github.com/cebe/markdown/issues/166 No Types Assigned

https://github.com/cebe/markdown/issues/166 Exploit, Issue Tracking, Third Party Advisory

Victim must voluntarily interact with attack mechanism

PHP Markdown version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in The parser allows a malicious crafted script to be executed that can result in Steal user data with a crafted script. This attack appear to be exploitable via User must open a crafted MD formatted file.

PHP cebe markdown parser version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in all distributed parsers allowing a malicious crafted script to be executed that can result in the lose of user data and sensitive user information. This attack can be exploited by crafting a three backtick wrapped payload with a character in front: L: "```<script>alert();</script>```"