Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3ppf-x2gr-8g6c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221.

Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221.

EPSS

Процентиль: 58%
0.00358
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 4 лет назад

Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221.

EPSS

Процентиль: 58%
0.00358
Низкий

Дефекты

CWE-79