Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9w5v-j38r-rr4m

Опубликовано: 01 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files.

Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files.

EPSS

Процентиль: 39%
0.00178
Низкий

7.3 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.3
nvd
почти 2 года назад

Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute arbitrary code by uploading Markdown files.

EPSS

Процентиль: 39%
0.00178
Низкий

7.3 High

CVSS3

Дефекты

CWE-79