typora through 0.9.9.20.3 beta has XSS, with resultant remote command execution, via the left outline bar.
References
Link | Resource |
---|---|
https://github.com/typora/typora-issues/issues/2124 | Exploit Third Party Advisory |
https://github.com/typora/typora-issues/issues/2124 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:47
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/typora/typora-issues/issues/2124 - Exploit, Third Party Advisory |
Information
Published : 2019-01-25 05:29
Updated : 2024-11-21 04:47
NVD link : CVE-2019-6803
Mitre link : CVE-2019-6803
CVE.ORG link : CVE-2019-6803
JSON object : View
Products Affected
typora
- typora
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')