304
submitted 4 days ago by Zerush@lemmy.ml to c/opensource@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] ClassyHatter@sopuli.xyz 32 points 4 days ago

I don't know the technicalities, but Markdown supports links, and it's possible to craft a link that downloads a file and then executes it. You can look up the Notepad.exe RCE vulnerability from this year.

[-] thorhop@sopuli.xyz 20 points 4 days ago

Basically Notepad would pass the link to ShellEx and could launch executables.

this post was submitted on 09 Mar 2026
304 points (100.0% liked)

Open Source

45354 readers
59 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 6 years ago
MODERATORS