CVE-2020-18748

概要

参考情報

• github.com/typora · Third Party Advisory
• typora/typora-issues · Exploit

typora のその他の脆弱性

• CVE-2024-41482中 6.1Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component.
• CVE-2024-41481中 6.1Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.
• CVE-2024-33300高 7.3Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows attackers to execute…
• CVE-2024-31784中 6.1An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted pay…
• CVE-2024-31783中 6.1Cross Site Scripting (XSS) vulnerability in Typora v.1.6.7 and before, allows a local attacker to obtain sensitive information via a crafted…