Plate
Monthly
Server-side request forgery in @platejs/docx-io prior to 53.3.2 allows network-accessible attackers to exfiltrate internal network content by supplying crafted HTML to the htmlToDocxBlob function. When attacker-controlled HTML containing img tags referencing internal URLs is processed server-side, the converter fetches those resources and embeds the response bytes into the generated DOCX, creating a response-disclosure channel to internal network infrastructure. No public exploit code has been identified at time of analysis, but the attack technique is well-understood and requires no specialized tooling beyond crafted HTML.
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
Server-side request forgery in @platejs/docx-io prior to 53.3.2 allows network-accessible attackers to exfiltrate internal network content by supplying crafted HTML to the htmlToDocxBlob function. When attacker-controlled HTML containing img tags referencing internal URLs is processed server-side, the converter fetches those resources and embeds the response bytes into the generated DOCX, creating a response-disclosure channel to internal network infrastructure. No public exploit code has been identified at time of analysis, but the attack technique is well-understood and requires no specialized tooling beyond crafted HTML.
@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.