JavaScript Execution Vulnerability in Typora by Typora.io
CVE-2022-43668

6.1MEDIUM

Key Information:

Vendor

Typora

Status
Typora
Vendor
CVE Published:
7 December 2022

What is CVE-2022-43668?

Versions of Typora prior to 1.4.4 have a vulnerability that allows for the improper execution of JavaScript code embedded within files. When a user opens a specially crafted file using an affected version, the application may execute harmful JavaScript, which could lead to unauthorized actions being performed on the user's system. This vulnerability highlights the importance of keeping applications updated to safeguard against potential exploitation.

Affected Version(s)

Typora versions prior to 1.4.4

References

https://typora.io/releases/all
https://jvn.jp/en/jp/JVN26044739/index.html

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.