CVE-2021-3256806.09.2021, 12:15mrdoc is vulnerable to Deserialization of Untrusted DataEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary7.8 HIGHLOCALLOWNONECVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HBase ScoreCVSS 3.xEPSS ScorePercentile: UnknownAffected Products (NVD)VendorProductVersionmrdocmrdoc𝑥≤ 0.7.0𝑥= Vulnerable software versionsKnown Exploits!https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5adhttps://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5adCommon Weakness EnumerationCWE-502 - Deserialization of Untrusted DataThe application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.Referenceshttps://github.com/zmister2016/mrdoc/commit/bb49e1287700b4e7681eab544c61093821ce72f6https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5adhttps://github.com/zmister2016/mrdoc/commit/bb49e1287700b4e7681eab544c61093821ce72f6https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5ad