CVE-2023-42821

Summary

CVE-2023-42821 is a vulnerability affecting the Go library `github.com/gomarkdown/markdown`. Before pseudoversion `0.0.0-20230922105210-14b16010c2ee`, parsing malformed Markdown input with the `parser.Mmark` extension enabled could lead to an out-of-bounds read issue. This can result in a denial of service. The flaw is located in the `citation.go` file, specifically on line 69. The vulnerability arises when the parser attempts to access an element beyond its length. A patch, represented by commit `14b16010c2ee7ff33a940a541d993bd043a88940` or pseudoversion `0.0.0-20230922105210-14b16010c2ee`, has been released to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.