CyberRota Analysis
AI-GeneratedThe PyMdown Extensions library, specifically versions 10.0.1 to 10.21.2, contains a vulnerability in the SnippetPreprocessor that allows markdown snippet directives to access files from sibling directories due to an inadequate containment check when `restrict_base_path` is enabled. This could lead to unauthorized file access, potentially exposing sensitive information. Organizations using affected versions should prioritize upgrading to version 10.21.3 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.get_snippet_path() in pymdownx/snippets.py when `restrict_base_path: True`, allowing markdown snippet directives to read files from sibling paths that share the same base_path prefix, such as docs and docs_internal. This is a regression of CVE-2023-32309. This issue is fixed in version 10.21.3.
Related CVEs
Other vulnerabilities affecting the same vendor(s)