CVE-2021-3256806.09.2021, 12:15mrdoc is vulnerable to Deserialization of Untrusted DataEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNIST7.8 HIGHLOCALLOWNONECVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H@huntrdevCNA7.5 HIGHNETWORKHIGHLOWCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVEADP------Base ScoreCVSS 3.xEPSS ScorePercentile: 48%VendorProductVersionmrdocmrdoc𝑥≤ 0.7.0𝑥= Vulnerable software versionsKnown Exploits!https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5adhttps://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5adCommon Weakness EnumerationCWE-502 - Deserialization of Untrusted DataThe application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.Referenceshttps://github.com/zmister2016/mrdoc/commit/bb49e1287700b4e7681eab544c61093821ce72f6https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5adhttps://github.com/zmister2016/mrdoc/commit/bb49e1287700b4e7681eab544c61093821ce72f6https://huntr.dev/bounties/04fc04b3-2dc1-4cad-a090-e403cd66b5ad