[github.com/mindoc-org/mindoc] Arbitrary command execution in Minidoc

An arbitrary file upload vulnerability in Mindoc v2.1-beta.5 allows attackers to execute arbitrary commands via a crafted Zip file.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-29637
• https://github.com/mindoc-org/mindoc/issues/788
• https://github.com/advisories/GHSA-f7ff-xf87-f22q