pandoc records
2 published records for vendor pandoc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
25Monitor | CVE-2023-38745No exploit | Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating filpandoc · pandoc | Medium6.3 | — | 0.2% | Jul 25, 2023 |
20Monitor | CVE-2023-35936No exploit | Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted inputpandoc · pandoc · CWE-20 | Medium5.0 | — | 0.3% | Jul 5, 2023 |
- CVE-2023-3874525Monitor
Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating fil
MediumCVSS 6.3No exploitEPSS 0%pandoc · pandocJul 25, 2023
- CVE-2023-3593620Monitor
Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input
MediumCVSS 5.0No exploitEPSS 0%pandoc · pandocJul 5, 2023