Typora 1.6.4 Dev

CPE Details

Typora 1.6.4 Dev
typora
typora
1.6.4
2023-08-24
09h38 +00:00
2023-08-24
09h44 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:typora:typora:1.6.4:dev:*:*:*:*:*:*

Informations

Vendor

typora

Product

typora

Version

1.6.4

Update

dev

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-41481 2024-08-07 22h00 +00:00 Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the Mermaid component.
6.1
Moyen
CVE-2024-41482 2024-08-07 22h00 +00:00 Typora before 1.9.3 Markdown editor has a cross-site scripting (XSS) vulnerability via the MathJax component.
6.1
Moyen
CVE-2023-39703 2023-08-31 22h00 +00:00 A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via uploading a crafted Markdown file.
6.1
Moyen
CVE-2023-2971 2023-08-19 05h45 +00:00 Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.
6.5
Moyen
CVE-2023-2317 2023-08-19 05h35 +00:00 DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in tag. This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.
9.6
Critique
CVE-2023-2316 2023-08-19 05h34 +00:00 Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text from a malicious webpage and paste it into Typora.
7.4
Haute
CVE-2022-40011 2022-12-22 23h00 +00:00 Cross Site Scripting (XSS) vulnerability in typora through 1.38 allows remote attackers to run arbitrary code via export from editor.
6.1
Moyen