CVE-2024-7738

Summary

CVE-2024-7738 is a newly identified vulnerability affecting the Markdown File Handler component in the yzane vscode-markdown-pdf version 1.5.0. This issue is classified as problematic due to the potential for pathname traversal, allowing an attacker with local access to manipulate files outside of their intended location. The exploit for this vulnerability has been disclosed to the public, increasing the risk of its exploitation. The full impact and extent of this vulnerability are currently unknown.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.