CVE-2024-45308

CVE-2024-45308 is a medium-severity vulnerability affecting HedgeDoc, an open-source collaborative markdown notes application, specifically when using MySQL or MariaDB. This flaw allows an attacker to create a new note with an alias matching the lower-cased ID of an existing note, effectively hiding the original and presenting a manipulated version. The attack vector is network-based with high attack complexity, potentially leading to information integrity compromise (e.g., presenting malicious links) or denial of service for the original note. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.