Summaryinfo

A vulnerability was found in HackMD CodiMD up to 2.5.4. It has been classified as problematic. This vulnerability affects unknown code of the component Content-Security-Policy Header Handler. The manipulation leads to improper protection of alternate path. This vulnerability is listed as CVE-2025-46655. The attack may be initiated remotely. There is no available exploit. There is ongoing doubt regarding the real existence of this vulnerability. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in HackMD CodiMD up to 2.5.4. This issue affects an unknown code block of the component Content-Security-Policy Header Handler. The manipulation with an unknown input leads to a improper protection of alternate path vulnerability. Using CWE to declare the problem leads to CWE-424. The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded SVG documents containing JavaScript, but it can be bypassed in certain cases of different-origin file storage, such as AWS S3. NOTE: it can be considered a user error if AWS is employed for hosting untrusted JavaScript content, but the selected architecture within AWS does not have components that are able to insert Content-Security-Policy headers.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2025-46655 since 04/26/2025. The exploitation is known to be difficult. The attack may be initiated remotely. Neither technical details nor an exploit are publicly available.

The real existence of this vulnerability is still doubted at the moment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-12479). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• HackMD

Name

• CodiMD

Version

• 2.5.0
• 2.5.1
• 2.5.2
• 2.5.3
• 2.5.4

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion