Sensitive Information and Arbitrary Code Execution Vulnerability in Typora
CVE-2024-31784

Currently unrated

Key Information:

Vendor: Typora
Status: Typora
Vendor: CVE Published:; 16 April 2024

What is CVE-2024-31784?

An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the src component.

References

https://github.com/0x0fc/TyporaIframe/blob/main/TyporaIfr...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 16, 2024
Vulnerability Reserved
Apr 5, 2024

JSON