CVE-2022-25069

概要

参考情報

• marktext/marktext · Exploit
• marktext/marktext#3002 · Patch

marktext のその他の脆弱性

• CVE-2023-2318緊急 9.6DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScrip…
• CVE-2023-1004高 7.8A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown …
• CVE-2022-21158中 5.4A stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper handling of the link (with javascript: sch…
• CVE-2022-24123緊急 9.0MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering. This could lead to Remote Code Execution via a .md …
• CVE-2021-29996緊急 9.6Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files c…