CVE-2020-20269

{"id": "CVE-2020-20269", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2021-01-26T18:15:41.973", "references": [{"url": "http://packetstormsecurity.com/files/161072/Caret-Editor-4.0.0-rc21-Remote-Code-Execution.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2021/Jan/59", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://caret.io", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/careteditor/issues/issues/841", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/careteditor/releases-beta/releases/tag/4.0.0-rc22", "tags": ["Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://seclists.org/fulldisclosure/2021/Jan/59", "tags": ["Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A specially crafted Markdown document could cause the execution of malicious JavaScript code in Caret Editor before 4.0.0-rc22."}, {"lang": "es", "value": "Un documento Markdown especialmente dise\u00f1ado podr\u00eda causar la ejecuci\u00f3n de c\u00f3digo JavaScript malicioso en Caret Editor versi\u00f3n anterior a 4.0.0-rc22"}], "lastModified": "2021-01-30T00:07:17.220", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:caret:caret:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "784E7A0E-D6AC-4FA1-9384-AF1F56027B77", "versionEndIncluding": "3.4.6"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta0:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AA15514-9008-49E3-80DB-60371C0CE898"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A95468AA-C06F-4C64-A73E-AB9FBA4EFC3C"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AD7498B-0E15-4FB2-BCAB-A67D1AFBA33F"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DD2E645-7C12-46E6-AFD0-68BC48638D5F"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B098DDE4-31C5-4BD5-97FF-44A073721789"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C2CB740-FA87-476D-938A-893EA8AED962"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C624B7A-352D-4EA3-952C-6409D376429A"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD8D8E25-365B-4CB1-89F6-0D72D6398A45"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05F6D056-8D60-4729-84B7-ACE35EE21497"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:beta9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71E6C137-2D57-4522-B9E0-9294CB6542A1"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E08A3196-035C-4C4E-AAEB-C123F55D2F9F"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0159CAEF-7484-425F-BF5C-8B2D5DE3F44D"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBCC25DA-A4B4-4938-A4F4-C4DA9579F5F5"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc12:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2FF8273-06A9-465B-9422-9E8EAC8A688E"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc13:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCB2511F-BE3A-49B0-BACA-F9C48957F333"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc14:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "819EEDA8-0CD4-4A90-9972-F2D3B713CB67"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc15:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12A737AC-3116-4B71-9905-DBB566F893D8"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc16:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30509976-03F4-4A0A-B1BB-58544F7D9E22"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc17:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7584A7C-CAB5-4915-A6F2-D9ACDC67947F"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc18:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC6CF04D-7FAA-4054-8FC6-5A014C01934F"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc19:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "23EB051C-42EE-4598-B3FD-26C99BEDDF4F"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5E40D99-5882-4460-9D7A-8C2A2244718C"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc20:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CA23403-BCA3-4CB1-B95F-1F6D9DA4D7F9"}, {"criteria": "cpe:2.3:a:caret:caret:4.0.0:rc21:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45E78DAE-74DA-4B87-9427-275A66AAE5F1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}